5 Shared Responsibility and IAM Practice Free Online FlashCards

Who secures the underlying AWS infrastructure?

AWS is responsible for securing the cloud’s underlying facilities, hardware, networking, and infrastructure.

What is an IAM role commonly used to provide to workloads?

An IAM role is an identity that trusted users, services, or federated principals can assume; it commonly provides workloads temporary credentials.

What does an IAM role’s trust policy determine?

A role’s trust policy specifies who or what may assume the role; it does not define the actions permitted after assumption.

Does enabling MFA grant access to AWS resources?

MFA strengthens authentication but does not grant permissions to AWS resources by itself.

What does least privilege mean in IAM?

Least privilege means granting only the actions and resources required for the task.

What happens when an applicable explicit Deny conflicts with an Allow?

An applicable explicit Deny overrides an Allow, so the request is denied.

Which resource ARN forms match listing a bucket and reading its objects?

Use the bucket ARN for s3:ListBucket and an object ARN ending in /* for s3:GetObject on objects in that bucket.

How should an EC2 application access S3 without storing a long-term key?

Prefer an EC2 IAM role with only the required bucket permissions, so the application uses temporary credentials instead of a long-term access key.

What three request details should an access review identify first?

Identify the principal making the request, the requested action, and the affected resource; then review applicable policies and controls.

What does customer responsibility for security in the cloud include?

Customers are responsible for security in the cloud, including configuring access, protecting data, and managing applications and identities.

Who patches an EC2 guest operating system?

For an EC2 instance, the customer manages the guest operating system and its patches; AWS secures the infrastructure beneath it.

What does an IAM permissions policy define?

A permissions policy describes allowed or denied actions, resources, and optional conditions.