Least Privilege approach is to give users as many rights as possible and revoke back after.

• true

• false

Which IAM Entity is ideal for AWS services that need to make calls to other AWS services on your behalf?

• User

• Group

• Role

What is required to make programmatic calls to AWS using AWS CLI, the AWS SDKs, or direct HTTPS calls using the APIs for individual services?

• Admin User Priviledges

• I am User access Key/ secret key

• IAM Role

• MFA Authentication

Which type of identity-based policy provides a more precise access control and can be attached to multiple entities?

• AWS Managed

• Customer Managed

• Inline

if policies that apply to a request include an Allow statement and a Deny Statement, the allow statement supercedes the Deny Statement

• True

• False

An implicit denial occurs when there is no applicable Deny statement but also no applicable Allow statement.

• True

• False

Which type of identity-based policy maintains a strict one-to-one relationship between the policy and the principal entity that it's applied to?

• AWS Managed

• Customer Managed

• Inline

A solutions architect is deploying an application on Amazon EC2, which must call AWS APIs. What method should they use to securely pass credentials to the application?

• Pass API credentials to the instance using instance user data.

• Store API credentials as an object in an Amazon S3 bucket.

• Embed the API credentials into the application.

• Assign an IAM role to the EC2 instance.

Which of the following is NOT a feature of AWS Security Token Service?

• AWS STS enables users to request temporary limited-privilege credentials.

• AWS STS enables users to assume a role.

• AWS STS enables users to request Git credentials.

• AWS STS generates federated credentials for IAM users.

A solutions architect has written an AWS Lambda function that writes customer data to an Amazon DynamoDB table. Which of the following must be in place to ensure that the Lambda function can interact with the DynamoDB table?

• An IAM role is attached to the Lambda function with the required DynamoDB privileges.

• An IAM user is attached to the Lambda function that has the required DynamoDB privileges.

• Access keys are embedded in the AWS Lambda function.

• The IAM user password is embedded in the AWS Lambda function.