Chapter 4 - AWS IAM

What is the purpose of IAM Users and Groups in AWS?

• IAM Users and Groups in AWS are designed for entertainment purposes.

• IAM Users and Groups in AWS are used to manage physical hardware.

• IAM Users and Groups in AWS are used to manage access to AWS services and resources.

• IAM Users and Groups in AWS are used for billing purposes only.

Explain the concept of IAM Roles and Policies.

• IAM Roles are used for managing network configurations

• Policies are used for defining user authentication methods

• IAM Roles define permissions for making AWS service requests, while Policies define permissions for IAM entities.

• IAM Roles are only applicable to on-premises servers

How are IAM Permissions and Access managed in AWS IAM?

• By asking other AWS users for permission

• By creating policies that define permissions and attaching them to IAM identities.

• By sending emails to AWS support

• By writing code directly in the AWS Management Console

How can you create a new IAM user in AWS?

• Use AWS SDK > Write code to create user > Execute script > Set permissions

• Log in to AWS Management Console > IAM > Users > Add user > Enter details > Set permissions > Create user

• Navigate to S3 > Create new user > Enter details > Set permissions > Save

• Access AWS CLI > Run command to create user > Enter details > Set permissions

In AWS IAM, there are two primary types of policies used to manage permissions. What are them?

• Access Control Lists

• Attribute-Based Policies

• Policy Documents

• Identity-Based Policies

• Resource-Based Policies

How can you grant permissions to an IAM user in AWS?

• Modify the user's password to grant permissions

• Create an IAM policy with the required permissions, attach the policy to the IAM user.

• Grant permissions directly through the AWS Management Console

• Assign a new IAM role to the user

Explain the concept of IAM Access Keys.

• IAM Access Keys are long-term credentials used to access AWS services programmatically.

• IAM Access Keys are used for physical access to AWS data centers.

• IAM Access Keys are temporary credentials that expire after 24 hours.

• IAM Access Keys are used for accessing Google Cloud Platform services.

What are the advantages of using IAM Groups in AWS?

• IAM Groups in AWS provide easier permission management, consistency in permissions across users with similar roles, and simplification of user access control.

• IAM Groups in AWS provide unlimited storage capacity

• IAM Groups in AWS increase network latency

• IAM Groups in AWS can only be used for billing purposes

How can you monitor IAM activity in AWS?

• Use AWS Config to monitor IAM activity.

• Set up AWS CloudWatch to monitor IAM activity.

• Implement AWS Trusted Advisor to monitor IAM activity.

• Enable AWS CloudTrail to monitor IAM activity.

What are the key components of IAM Policies?

• Resources

• Adjectives

• Actions

• Effects

• Conditions