Day 2 - IAM (cont.)

Which one is NOT a way to protect your root account

• Delete any access keys associated with root
• Assign a long and complex password
• Store password in a secure password vault
• Enable multifactor authentication for the root account
• Wherever possible, use root account to perform administration operations

You create a new user in the IAM Dashboard and attach the AmazonS3FullAccess policy for that one. Log in as your new user and try to create a new S3 bucket and launch a new EC2 instance. What's happen ? (choose 2)

• That user can create new S3 bucket
• That user can't create new S3 bucket
• That user can launch a new EC2 instance
• That user can't launch a new EC2 instance

IAM Password policy requires you to set up minimum length is 15, and must include uppercase & lowercase letters, numbers and non-alphanumeric characters. Which one below will be valid ?

• Password_123
• thisIsMyPassword123
• this_is_my_password123
• THIS_IS_MY_PASSWORD123
• This_is_my_password123

Access Keys are generated through ______

• AWS Management Console
• AWS Command Line Interface (CLI)
• AWS Software Developer Kit (SDK)
• AWS CloudShell

You can you Access Keys to access ___________ (choose 2)

• AWS Management Console
• AWS Command Line Interface (CLI)
• AWS Software Developer Kit (SDK)
• AWS CloudShell

What format must be used to write an IAM policy?

• HTML
• JSON
• XML
• SAML

What is a proper definition of an IAM Role?

• IAM Users in multiple User Groups
• An IAM entity that defines a password policy for IAM Users
• An IAM entity that defines a set of permissions for making request to AWS services
• Permissions assigned to IAM Users to perform actions

Which of the following are necessary steps for creating an IAM role? (Choose two.)

• Define the action
• Select at least one policy.
• Define a trusted entity
• Define the consumer application.

If you need to allow a user full control over EC2 instance resources, which two of the following must be included in the policy you create?

• "Target": "ec2:*"
• "Action": "ec2:*
• "Resource": "ec2:*"
• "Effect": "Allow"
• "Effect": "Permit"

What tool should use to allow an EC2 instance to access S3 buckets ?

• IAM role
• IAM policy
• IAM group
• IAM user