What is an iam permission - Study guides, Class notes & Summaries

When requested through an STS API call, credentials are return with what components? - ANS Security token, access key ID, secret access key, expiration which of the following are managed using IAM (choose 2) A. Multi-Factor Authentication B. Bucket Policies C. Billing Reports D. Roles E. Security Groups - ANS MFA + Roles IAM is used to manage users and their access to AWS, and AWS service, as well as access from one AWS resource to another including: Users,...

A Developer created a dashboard for an application using Amazon API Gateway, Amazon S3, AWS Lambda, and Amazon RDS. The Developer needs an authentication mechanism allowing a user to sign in and view the dashboard. It must be accessible from mobile applications, desktops, and tablets, and must remember user preferences across platforms. Which AWS service should the Developer use to support this authentication scenario? - correct answer Amazon Cognito A Developer has created an S3 bucket ...

CloudTrail: Event History CloudTrail event history provides a viewable, searchable, and downloadable record of the past 90 days of CloudTrail events. You can use this history to gain visibility into actions taken in your AWS account in the AWS Management Console, AWS SDKs, command line tools, and other AWS services. You can customize your view of event history in the CloudTrail console by selecting which columns are displayed. Data Events Provide insight into resource operations perf...

CloudHSM Certificates - AWS Root Certificate - Manufacturer Root Certificate - AWS Hardware Certificate - Manufacturer Hardware Certificate - HSM Certificate - Cluster CSR CloudHSM Meet corporate, contractual and regulatory compliance requirements for data security by using dedicated Hardware Security Module (HSM) appliances within the AWS cloud; see also HSM and KMS - Security CloudHSM - Verifying our certificates Concatenate the two certificates - AWS Hardware ...

Introduction to Cyber Security Revision Confidentiality - answers Information accessible to authorised entities only Integrity - answers Protecting accuracy and completeness Availability - answers Accessible and usable on demand by an authorised entity Non-repudiation - answers Ability to prove that an entity/person cannot deny having carried out an action Asset - answers Anything of value to an organisation Information Asset - answers Any hardwar...

A Developer created a dashboard for an application using Amazon API Gateway, Amazon S3, AWS Lambda, and Amazon RDS. The Developer needs an authentication mechanism allowing a user to sign in and view the dashboard. It must be accessible from mobile applications, desktops, and tablets, and must remember user preferences across platforms. Which AWS service should the Developer use to support this authentication scenario? - correct answer Amazon Cognito A Developer has created an S3 bucket ...

AWS Certified Developer Associate 1 Multiple Choice Questions And Correct Answers With Rationale. A user is running a MySQL RDS instance. The user will not use the DB for the next 3 months. How can the user save costs? A. Pause the RDS activities from CLI until it is required in the future B. Stop the RDS instance C. Create a snapshot of RDS to launch in the future and terminate the instance now D. Change the instance size to micro Answer(s): C Explanation: The RDS instances unlike th...

A company is running an Amazon Redshift cluster. A data engineer must design a solution that would give the company the ability to provide analysis on a separate test environment in Amazon Redshift. The solution would use the data from the main Redshift cluster. The second cluster is expected to be used for only 2 hours every 2 weeks as part of the new testing process. Create a data share from the main Redshift test cluster. Use Amazon Redshift Serverless for the test environment A company is ...

1.) Which AWS services can be used to store files? Chose 2 answers from the options given below. A. Amazon Cloud Watch B. Amazon Simple Storage Storage (Amazon S3) C. Amazon Elastic Block Store (Amazon EBS) D. AWS Config E. Amazon Athena B, C 2.) Which of the following services uses AWS edge locations? A. Amazon Virtual Private Cloud (Amazon VPC) B. Amazon CloudFront C. Amazon Elastic Compute Cloud (Amazon EC2) D. AWS Storage Gateway B 3.) Which of the following is a benefit of A...

WGU C838 You are the security subject matter expert (SME) for an organization considering a transition from the legacy environment into a hosted cloud provider 's data center. One of the challenges you 're facing is whether the cloud provider will be able to comply with the existing legislative and contractual frameworks your organization is required to follow. This is a _________ issue. a. Resiliency b. Privacy c. Performance d. Regulatory D 76. You are the security subject matter expert (SME...