Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM)

A cloud engineer has successfully created a new AWS account for a startup. To secure the account immediately, what is the AWS-recommended best practice for performing daily administrative operations?

  1. A
    Use the AWS account root user for daily operations but enable Multi-Factor Authentication (MFA).
  2. Create an IAM user with administrative permissions and use it for daily tasks, while restricting the root user.Answer
  3. C
    Delegate all administrative tasks to AWS Support through the shared responsibility model.
  4. D
    Assign an IAM role directly to the root user to perform administrative operations.

Answer

Create an IAM user with administrative permissions and use it for daily tasks, while restricting the root user.
The AWS-recommended best practice is to secure the root user credentials and avoid using them for daily tasks. Instead, an IAM user with administrative permissions should be created and used for day-to-day administrative operations.

Step-by-Step Solution

1
Identify the AWS security best practices regarding the root user account.
The root user has unrestricted access to all resources and billing information and should not be used for daily tasks.
Restricting root user usage minimizes the risk of accidental configuration changes or credential compromise.
2
Determine the correct entity for daily administrative tasks.
An IAM user with administrative privileges should be created to manage resources day-to-day.
This allows for proper logging, control, and alignment with the principle of least privilege where appropriate.

Key Concept

AWS Root Account Security and IAM Administration Best Practices
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic