IAM

Question 1

How should permissions be assigned for users?

Answer 1

Users should be assigned to groups and permissions assigned to the group.

Question 2

How should permissions be assigned to services?

Answer 2

Services should be assigned a Role and permissions assigned to the Role.

Question 3

How could you audit your IAM accounts?

Answer 3

Use IAM Credential Reports to review all accounts. Use IAM Access Advisor to review a specific account.

Question 4

What does an IAM Policy statement consist of?

Answer 4

Sid, Effect, Principal, Action, Resource, and Condition.