Other Advance Flashcards
What is organization Root in aws organization?
A root is a top-level parent node in the hierarchy of an organization that can contain organizational units (OUs) and accounts. The root contains every AWS account in the organization.
What is organization unit in aws organization?
An organizational unit (OU) is a logical grouping of accounts in your organization, created using AWS Organizations. OUs enable you to organize your accounts into a hierarchy and make it easier for you to apply management controls.
In AWS organization can we have iam users in all member accounts?
it’s recommended to have only one aws account dedicated for uses and use role to access resources on other aws accounts.
What is management account in aws organization?
AWS account which create the aws organization is called management account
What is Role switch in AWS Organization?
Role switch allow you to switch access between aws accounts with in aws organization
Do we need to create role manually to perform role switch in existing aws accounts?
Yes
Do we need to create role manually to perform role switch for new aws accounts?
No it will be created by aws
What is Resource Access Manager?
RAM share AWS resources between AWS Accounts
Can we share all aws services using RAM?
No only supported service can be shared using RAM
RAM is a free service?
Yea
Does AWS rotate AZ names ?
Yes
us-east-1a in my account is same as us-east1a in your account?
No AWS rotate AZ names…accounts will have different AZ location for same name
If AWS rotate AZ Names what gives you consistent AZ reference?
AZ ID is consistent across multiple aws accounts
In RAM who share the resources?
Owner account
In RAM who has full ownership of resources?
Owner account
In AWS RAM what are principals?
Principals are the AWS accounts whom we can share the resources
If we share resources using RAM to a AWS account inside ORGANIZATION do we need to accept manually?
accepted automatically with in the organization.
If we share resources using RAM to a AWS account outside ORGANIZATION do we need to accept manually?
Manual acceptance is required for non organization AWS accounts or sharing is disabled with AWS organization
Using RAM can we share VPC With other AWS accounts?
Yes
If we Shared VPC using RAM can a VPC owner modify resources created by other aws accounts?
No
Who is the owner of resources created in shared VPC using RAM?
Aws accounts which created the resources are the owner
If we Shared VPC using RAM can a VPC owner access resources created by other aws accounts?
No
In AWS RAM can you see what resources are shared with other AWS accounts?
No
In RAM can participate account see resources available in other participants accounts?
No
