Chapter 6: Authentication and Authorization—AWS Identity and Access Management
- 1. C. While each of the other answers represents possible concerns, none of them carries consequences as disastrous as the complete loss of control over your account.
- 2. B. The Action element refers to the kind of action requested (list, create, etc.), the Resource element refers to the particular AWS account resource that’s the target of the policy, and the Effect element refers to the way IAM should react to a request.
- 3. A, B, C. Unless there’s a policy that explicitly allows an action, it will be denied. Therefore, a user with no policies or with a policy permitting S3 actions doesn’t permit EC2 instance permissions. Similarly, when two policies conflict, the more restrictive will be honored. The AdministratorAccess policy opens up nearly all AWS resources, including EC2.
- 4. B, C. If you don’t perform any administration operations with regular IAM users, then there really...
