Timedora
Free Online Flashcard Deck

1 IAM Fundamentals and Least Privilege Free Online FlashCards

Study 1 IAM Fundamentals and Least Privilege with 12 free online flashcards. Review key terms, definitions, and concepts with this interactive flashcard deck.

12 cards
01
Front

What does AWS IAM control?

Back

IAM controls who or what can access AWS resources and which actions they are allowed to perform.

02
Front

What is a principal in AWS IAM?

Back

A principal is the identity making a particular request.

03
Front

What is an IAM group, and who signs in?

Back

IAM groups collect users to help administrators manage common permissions; users, not groups, sign in.

04
Front

What does assuming an IAM role provide?

Back

A role can be assumed by a trusted principal, providing temporary credentials and the permissions attached to that role.

05
Front

How should the AWS account root user be used?

Back

The root user has broad account access. Protect it and reserve it for tasks that specifically require it, not everyday work.

06
Front

What question does authentication answer?

Back

Authentication verifies the identity making a request: who or what is requesting access.

07
Front

What does authorization determine?

Back

Authorization determines whether an authenticated principal may perform a requested action on a resource.

08
Front

How does MFA strengthen sign-in?

Back

MFA strengthens sign-in by requiring an additional factor, such as an authenticator code or security key.

09
Front

What elements commonly appear in an IAM policy statement?

Back

A policy statement commonly specifies an Effect, an Action, a Resource, and optionally a Condition.

10
Front

Where are identity-based and resource-based policies attached?

Back

Identity-based policies attach to users, groups, or roles; resource-based policies attach to supported AWS resources.

11
Front

What is AWS's default access behavior, and what overrides an allow?

Back

AWS denies requests by default unless applicable permissions allow them, and an explicit deny overrides an allow.

12
Front

What does least privilege mean?

Back

Least privilege grants only the permissions needed for a task, and no more.