IAM AWS

What would be the most practical way to grant users in your billing department access to a billing folder in your S3 bucket?

• Create an inline policy granting the necessary access and attach it to each user.

• Create a Billing Group, place the billing users in the group, and attach a policy granting the necessary permissions to this group.

• Create an EC2 instance for their use and attach the appropriate role to the instance at startup.

• Make you S3 Bucket public.

Permissions are granted through __ that are created and then attached to users, groups, or roles.

• IAM Console

• Roles

• Policies

• Resources

When a user is first created in AWS IAM, what services are they given access to by default?

• No Access to Any Services

• Access to IAM

• Full Access to services

• Default Services

True or False

An inline policy is a policy that's embedded in an IAM identity (a user, group, or role) and can not be shared between identities

• True

• False

What differentiates a role from a user? (Choose all that apply)

• A role has long-term credentials.

• A role does not have standard long-term credentials

• A role can be assumed by multiple identities.

• A user is an AWS identity. A Role is not an identity

To which entities can you use Roles to delegate access? (Choose all that apply)

• Users

• Services

• Policies

• Resource based policies

This presentation was awesome!

• Yes

• No

• So so