Section 4 IAM & AWS CLI

Question 1

These policies are attached directly to a user that’s not part of a group

Answer 1

Inline

Question 2

IAM Policies statements consist of the following

Answer 2

Sid: an identifier for the statement (optional)
* Effect: whether the statement allows or denies access
(Allow, Deny)
* Principal: account/user/role to which this policy applied to
* Action: list of actions this policy allows or denies
* Resource: list of resources to which the actions applied to
* Condition: conditions for when this policy is in effect
(optional)

Question 3

MFA Device options in AWS

Answer 3

Virtual MFA device
Universal 2nd factor security key
Hardware key fob
Hardware key fob for AWS GovCloud

Question 4

These policies are attached directly to a user that’s not part of a group

Answer 4

Inline

Question 5

Ways users can access AWS

Answer 5

Management console
CLI
SDK

Question 6

When should the root account be used?

Answer 6

aws account setup only

Question 7

What do groups contain?

Answer 7

Users