AWS Certified Data Analytics Specialty 2021 – Hands-On - Policies - Advanced

The video tutorial introduces advanced IAM policies, focusing on understanding and using variables to create tailored policies. It covers the use of AWS username variables, principal types, and tags to restrict access. The tutorial also discusses IAM policies for federated users, explaining how identity providers like Cognito and Amazon.com expose specific variables. The video encourages self-exploration of IAM policies in S3 and DynamoDB, emphasizing the importance of understanding these concepts for exams.

What is the purpose of using the AWS username variable in IAM policies?

• To assign a fixed policy to each user

• To dynamically replace the username at runtime

• To create a new IAM user

• To delete an existing IAM user

How can policy variables help manage policies for multiple users?

• By creating a separate policy for each user

• By using dynamic values to apply a single policy to a group

• By assigning the same policy to all users without changes

• By removing the need for policies altogether

Which of the following is NOT a type of principal in IAM policies?

• Account

• User

• Federated

• Database

What is the role of the AWS Federated provider variable?

• To create a new identity provider

• To replace the identity provider used for the user

• To assign a fixed identity provider to all users

• To delete an existing identity provider

Which identity provider variable is used for Amazon.com users?

• sts.amazon.com: sub

• dollarsignww.amazon.com: user_id

• cognitoidentity.amazon.com: sub

• saml.amazon.com: user_id

Why are IAM policies not used for database security in RDS?

• Because IAM policies are too complex

• Because IAM policies are not secure

• Because RDS is a proprietary technology

• Because RDS uses IAM policies for security

What should you do if you encounter a complex IAM policy in an exam?

• Ask for help

• Understand it by recognizing variables

• Memorize it

• Ignore it