Section 4: IAM & AWS CLI

Question 1

What is an in-line policy?

Answer 1

A policy that is only attached to a user(s) that are outside of any group

Question 2

What are Policies?

Answer 2

Policies are JSON documents that define the permissions of Users or Groups

Question 3

What are the four most common, pre-written IAM roles?

Answer 3

EC2 Instance Roles
Lambda Function Roles
Roles for CloudFormation
Architects or SRE’s (site reliability engineers)

Question 4

What is an IAM Credentials Report (account-level)

Answer 4

A report that lists all your account’s users and the status of their various credentials

Question 5

What is an IAM access Advisor (user-level), and why is it useful?

Answer 5

Access advisor shows the service permissions granted to a user and when those services were last accessed

this information can be used to revise policies

Question 6

What is an IAM credentials Report?

Answer 6

A report that lists all your account’s users and their credentials