Examkin

Question

Difficulty: MediumIdentity and Access Management (IAM)

A startup is setting up its first AWS account to host a web application. The company's IT lead needs to perform daily operations, such as creating Amazon EC2 instances and configuring Amazon S3 buckets. Which AWS security best practice should the IT lead follow to manage these daily administrative tasks?

  1. Create an individual IAM user with administrative permissions, enable multi-factor authentication, and use this user for daily activities.Answer
  2. B
    Use the AWS account root user credentials for daily administrative tasks to prevent access blocks or permission configuration issues.
  3. C
    Create a permanent IAM role for the IT lead to log in to the AWS Management Console directly without requiring an IAM user.
  4. D
    Request AWS Support to handle daily resource configuration tasks, as identity management is fully managed by AWS.

Answer

Create an individual IAM user with administrative permissions, enable multi-factor authentication, and use this user for daily activities.
The correct answer is to create an individual IAM user with administrative permissions, enable multi-factor authentication, and use this user for daily activities. This aligns with the AWS best practice of protecting the root user credentials and ensuring that administrative tasks are performed by authenticated IAM identities.

Step-by-Step Solution

1
Identify the requirement for administrative daily access in a newly created AWS account.
Identified that the IT lead needs administrative privileges to create instances and configure S3 buckets.
Ensures the correct level of access is provisioned for daily operations.
2
Evaluate access options against AWS security best practices.
Determined that using the AWS account root user is discouraged for daily activities, while IAM roles cannot be used as permanent direct login identities.
Prevents credential exposure and aligns with organizational security standards.
3
Select the best practice approach of using an administrative IAM user with multi-factor authentication (MFA) enabled.
Secure administrative operations are established while keeping root user credentials protected.
Minimizes security risks and complies with the principle of least privilege.

Key Concept

AWS Account Root User and IAM Identity Best Practices
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic