Security and Compliance Flashcards
What is the default level of access a newly created IAM User is granted?
By default new IAM Users have no permissions to AWS services. They must be explicitly granted.
What is an object in AWS stored as a JSON document that provides a formal statement of one or more permissions.
A policy is an object in AWS that, when associated with an identity or resource, defines their permissions. Most policies are stored in AWS as JSON documents.
What do Access Key ID and Secret Access Keys allow?
A Key and Secret Key combination are used to access AWS programmatically. To access the console you use an account and password combination.
Power User Access allows ____.
Access to all AWS services except the management of groups and users within IAM.
How can you allow cross-account console and programmatic access to an S3 bucket by users in a different account?
Setting up a cross account IAM role is currently the only method that will allow IAM users to access cross account S3 buckets both programmatically and via the AWS console.
What does IAM allow?
IAM allows you to manage users, groups, roles, and their corresponding level of access to the AWS Platform.
What level of access does the “root” account have?
The root account in an AWS account represents the Owner of the account and can do anything including changing billing details and even close the account. The details for this account should be locked away and only used when absolutely necessary.
What is IAM?
IAM (Identity Access Management) allows you to manage users and their level of access.
What does IAM use to manage users and their roles?
IMA uses groups to which users can be assigned.
The users will then inherit the permissions of the group.The permissions themselves are defined by policies.
To what in AWS can you access using access keys and secret access keys?
Access keys and secret access keys are used to access AWS via the command line or via API, but not via the console.
What does a credential report provide?
A credential report provides a download of all users in your account.It gives details such as the last use of passwords, when they need changing, whether it has an access key on the account, whether MFA has been enabled etc.
How does IAM provide access?
IAM uses Groups to which people can be assigned to give access to resources
How are IAM groups defined?
IAM groups are defined using policies which are created using JSON notation
What is IAM used for?
Identity Access Management (IAM) is used for assigning roles and permissions to users
Within IAM in what are users stored and what is used to set permissions?
Groups are used to store users and the users assume the permissions of that group. Group access is determined by JSON notation policies.
What is a credential report?
A credential report is used as a download of all users in your account. It gives details such as the last use of passwords, when they need changing, whether it has an access key on the account, whether MFA has been enabled etc.
What does IAM use to manage access?
IAM uses Groups (to which users can be assigned), and Roles to manage access.
A customer has created an Administrators group in IAM containing 5 users. What does the customer attach to the group to ensure all the users have the needed administrative access?
IAM policies can be attached to a group to ensure all users in the group have the same access. AWS even has a managed policy, Administrator Access, you can use.
What does WAF do?
WAF protects against SQL injection and cross-site scripting attacks.
