IAM

Question 1

Can groups be nested?

Answer 1

No

Question 2

Policy document format

Answer 2

JSON

Question 3

Policies aka

Answer 3

Permissions

Question 4

IAM Policy:
SID
Effect
Principal
Action
Resource

Answer 4

Optional ID number
Allow or Deny access
Account/role it applies to
List of actions allowed or denied

Question 5

How can users access AWS?

Answer 5

Management console
CLI (w/ access keys)
SDK (w/ access keys)

Question 6

IAM Roles

Answer 6

Used by services to perform actions

Question 7

IAM Roles

Answer 7

Specific permissions for short durations
Assume a role

Question 8

How long do IAM roles last?

Answer 8

Temporary credentials per session

Question 9

IAM Access Advisor

Answer 9

Shows service permissions granted to a user and when services were last accessed

Question 10

IAM Credentials Report

Answer 10

Lists accounts users and status of credentials