Security

Question 1

What controls access to AWS services?

Answer 1

Identity and Access Management (IAM)

Question 2

How do you get to IAM?

Answer 2

https://console.aws.amazon.com/iam

Question 3

What is a subset of a group?

Answer 3

user

Question 4

What is a role made up of?

Answer 4

policies

Question 5

What can assume a role?

Answer 5

a process

Question 6

What gives a service access?

Answer 6

a role

Question 7

Do you have to create roles for all services?

Answer 7

No. Sometimes they are created automatically.

Question 8

What are the steps to creating a role for lambda functions?

Answer 8

IAM > Roles > Create Role > Highlight AWS service > highlight Lambda > click Next: Permissions

Question 9

When creating a user, what are the two types of access a user can have?

Answer 9

programmatic access and aws management console access

Question 10

What are the two types of pools Cognito offers?

Answer 10

user pools and identity pools

Question 11

Which Cognito pool allows people access without a login?

Answer 11

identity pool

Question 12

Which Cognito pool are accounts created on AWS via your app or your website?

Answer 12

user pool

Question 13

How do you get to Cognito?

Answer 13

Console > Security > Cognito

Question 14

How do you create a user pool in Cognito?

Answer 14

Click on cognito and then click Mange User Pools

Question 15

How do you manage identity pools through the mobile hub?

Answer 15

Select if you want to allow access from Facebook, google, and amazon.

Question 16

Cognito > create identity pool: Why would you enable access to unauthenticated identities?

Answer 16

Because some apps allow people access without requiring them to login.

Question 17

Cognito > create identity pool > unauthenticated identities: How do you create options for SAML or OpenID?

Answer 17

AWS IAM console hyperlink > create provider

Question 18

Cognito > create identity pool > unauthenticated identities > AWS IAM console hyperlink > create provider > select SAML for provider type: How do you enable metadata document?

Answer 18

Go to the saml identity provider service and register aws with it. Then, get the document.