Background + IAM

Question 1

Problems with traditional IT approach

Answer 1

Pay for the rent for the data center
• Pay for power supply, cooling, maintenance
• Adding and replacing hardware takes time
• Scaling is limited
• Hire 24/7 team to monitor the infrastructure
• How to deal with disasters?

Question 2

What is cloud computing

Answer 2

• on-demand delivery of resources
• pay-as-you-go pricing
• provision the right type and size of resources
• access almost instantly
• Simple way to access resources

Question 3

What are cloud deployment models?

Answer 3

• Private Cloud
• Public Cloud
• Hybrid Cloud

Question 4

What are the characteristics/advantages of cloud computing?

Answer 4

• On-demand self service
• Trade capex for opex / variable expense
• Broad network access
• Multi-tenancy and resource pooling
• Rapid elasticity and scalability
• Stop maintaining data centers
• Measured service / Pay as you go for what you use
• Go global in minutes
• High availability and fault tolerance

Question 5

What are the types of cloud computing

Answer 5

Infrastructure as a service
Platform as a service
Software as a service

Question 6

What are AWS pricing fundamentals?

Answer 6

• Compute time
• Storage used
• Data transferred out (Data in is free)

Question 7

AWS Global Infrastructure

Answer 7

• Regions (cluster of data centers, 2 or more AZs)
• Availability Zones (one or more discrete data centers)
• Data Centers
• Edge Presence

Question 8

What is IAM?

Answer 8

Identity and Access Management

• Root account
• User
• Groups

Question 9

Descrine IAM Permissions

Answer 9

• Assigned in JSON document
• define the permissions
• use the least privilege principle

Question 10

IAM - Password policy

Answer 10

• Setup your own policy

- pw requirements (length, chars, expiration)

Question 11

AWS MFA

Answer 11

• Prevents use of stolen pw/credentials
• Virtual MFA: Google Authenticator / Authy phone apps
• Universal 2nd Factor (U2F): YubiKey (USB Device)
• Hardware Key FOBs

Question 12

How is AWS accessed

Answer 12

• Management console
• Command line interface
• Software development kit
• AWS Cloudshell - cloud cli in AWS
  Each uses access keys

Question 13

IAM Roles for services

Answer 13

• some services perform actions on your behalf

- must assign permissions to these services

Question 14

IAM Montoring Reports

Answer 14

• IAM Credentials Report (overall account view)

- IAM Access Advisor (user view)