Section 4a: IAM - Identity and Access Management

Question 1

IAM is

Answer 1

Identity and Access Management

Question 2

A Root account is

Answer 2

An account created by default. It shouldn’t be used or shared.

Question 3

Users are

Answer 3

People within your org that can be added to groups.

Question 4

Groups are

Answer 4

Groupings of users. In AWS groups can ONLY contain users, not other groups.

Question 5

IAM permissions are defined in what format?

Answer 5

JSON

Question 6

What is the least
privilege principle

Answer 6

Not giving a user more permissions than they need

Question 7

Group policies get applied to

Answer 7

The whole group

Question 8

In-line policies get applied to

Answer 8

A specific user

Question 9

IAM (permissions) policy consists of

Answer 9

1. Version
2. ID (optional)
3. Statement(s)

Question 10

Statements consist of

Answer 10

• Sid (optional)
• Effect
• Principal
• Action
• Resource
• Condition (optional)

Question 11

Sid is

Answer 11

an identifier for the statement (optional)

Question 12

Effect is

Answer 12

whether the statement allows or denies access
(Allow, Deny)

Question 13

Principle is

Answer 13

account/user/role to which this policy applied to

Question 14

Action is

Answer 14

a list of actions this policy allows or denies. They are also API calls a permission allows a user to do.

Question 15

Resource is

Answer 15

list of resources to which the actions applied to

Question 16

Condition is

Answer 16

conditions for when this policy is in effect

Question 17

What can you do with an IAM Password Policy?

Answer 17

• Set a minimum password length
• Require specific character types:
• Allow all IAM users to change their own passwords
• Require users to change their password after some time (password expiration)
• Prevent password re-use

Question 18

MFA stands for

Answer 18

Multi Factor Authentication

Question 19

MFA is

Answer 19

password you know + security device you own giving a secure login

Question 20

What is the main benefit of MFA?

Answer 20

if a password is stolen or hacked, the account is not compromised

Question 21

The 4 MFA device options in AWS

Answer 21

1. Virtual MFA device
   2.Universal 2nd Factor (U2F) Security Key
2. Hardware Key Fob MFA Device
3. Hardware Key Fob MFA Device for
   AWS GovCloud (US)