Iam policy - Study guides, Class notes & Summaries

Identity and Access Management and Security Exam - Complete Solutions (Answered) Which of the following is not a feature of IAM? A. IAM offers centralized control of your AWS account. B. IAM integrates with existing active directory account allowing single sign-on. C. IAM allows you to setup biometric authentication, so that no passwords are required. D. IAM offers fine-grained access control to AWS resources. To save administration headaches, Amazon recommends that you leave all security grou...

What is an availability zone composed of? - correct answer 1 or more DCs in a location What are the three fundamentals of pricing in AWS? - correct answer Computer, storage and outbound data transfer Which of the following services is global in scope? IAM, EC2, RDS, Lambda - correct answer IAM (Identity Access Management) Which pricing model is highly flexible with no long-term commitments or upfront payments? a. Dedicated instances, b. spot instances, c. on-demand d. reservations...

Resource Hierarchy - Parent/Child Relationship structure - Resembles a file system - Top-down policy inheritance with policy controlled by IAM - Each child object can only have one parent - Org -> Folders (Optional) -> Projects -> Resources Organization - Root node - Organization Admin Role created - Full power to efit any/all resources Notable Organization Roles - Org. Policy Admin: Broad control over all cloud resources - Project Creator: Find-grained control of project cr...

- IAM Components includes - Tenancy Compartment Principals User Group Policy Region & Home Region Methods to access IAM services - OCI IAM console REST API CLI (Command Line Interface) SDK

AWS Certified Cloud Practitioner CLF-C02 Written Exam. Loose coupling A change or a failure in one component should not cascade to other components. Internet Gateway A gateway that enables your Amazon EC2 instances in the public subnet to connect to the public Internet. NAT Gateway A gateway that enables your EC2 instances in the private subnet to connect to the public Internet. AWS Firewall Manager A security management tool to configure your AWS WAF rules across your acco...

AWS SAA-002 Exam Questions Complete Answers New Update (Verified A+ pass) what type of consistency model is provided in Amazon S3 when you upload a new version of an object? - Answers -eventual consistency ( for overwrite PUTS and Deletes) how can you create a hierarchy that mimics a file system in Amazon S3? - Answers -use folders in your buckets an EC2 instance with an EBS root volume and an EBS data volume is terminated with a default settings. what will happen to the volumes? - Answ...

Continuous Integration Development practice that requires devs to push code to a repo often. A tester/builder checks the code as soon as it is published which allows devs to receive feedback faster. This allows devs to focus on writing code rather than running and waiting for tests to build & compile. Continuous Delivery Development practice that ensures software can be released reliably whenever needed. This ensures frequent as well as quick deployments. Most of the deployment is automated b...

OCI – IAM Latest Update with Verified Solutions IAM Components includes Tenancy Compartment Principals User Group Policy Region & Home Region Methods to access IAM services OCI IAM console REST API CLI (Command Line Interface) SDK No access, group Users have ______________ until being added to a ____________ that has policy with permission to tenancy or compartment access, resource Group is a collection of users who all need same type of ___________ to a set of ________________ Instance P...

AWS Cloud Practitioner - A Cloud Guru PRACTICE EXAM With Complete Solutions Delete root access keys, activate MFA on root account, apply IAM password policy, use groups to assign permissions, create individual IAM users Best Practices for Securing Root AWS Account Federated Access To grant users access to AWS services with corporate directory User Authorized, then Autheniticated The order a user is granted access to AWS services Compliance with Laws & Regulations, Certifications/Attestat...

Answer: B not A - default behavior is polling @ 60-second intervals; key phrase here is "the pipeline needs to be as responsive as possible" not C - CodeCommit repository can't natively execute a Lambda function without an Event trigger not D - same reason as (C) A company controls the source code for its product in AWS CodeCommit. The company is creating a CI/CD pipeline for the product using AWS CodePipeline. The pipeline must automatically start on changes to the master branch of the...