Security, Identity and Compliance (IAM, Cognito, KMS) Flashcards
1
Q
Should credentials be stored on EC2 instances to enable them to access other resources?
A
No, that is insecure
Use IAM roles instead
2
Q
Can IAM integrate with Active Directory?
A
Yes
3
Q
Can IAM be configured to support biometric authentication, so that no passwords are required?
A
No
4
Q
What is an IAM policy?
A
A JSON document defining one or more permissions
5
Q
Which IAM entity is used to grant resource access to users, groups, or services?
A
An IAM role
6
Q
What does Cognito use to create unique identities for users and authenticate them with the Web ID providers?
A
Identity Pools
