Security & Identity Services

Question 1

3 types of identity objects IAM lets you create are?

Answer 1

Users - identities which represent humans or apps thats need access to the account

Groups - Collections of related users

Roles - Can be used by AWS services or granting ext access to your acccount

Also consider policies (policy docs) that can be used to allow or deny access to services when attached to the above.

Question 2

3 jobs of IAM

Answer 2

Authenticate - prove who you are

Authorise - Allow or deny access to resources based on policies

Manage Identities (IDP)