Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM)

A startup is setting up its initial AWS environment and wants to secure the account. Which of the following are AWS Identity and Access Management (IAM) best practices that the startup should implement? (Select TWO.)

  1. Enable multi-factor authentication (MFA) for the AWS account root user.Answer
  2. Create individual IAM users for each team member who requires access.Answer
  3. C
    Use the AWS account root user credentials for daily administrative tasks.
  4. D
    Embed permanent IAM user access keys in EC2 instances to allow applications to access other AWS services.
  5. E
    Rely on AWS to automatically manage and rotate all developer passwords.

Answer

The correct practices are to enable multi-factor authentication (MFA) for the AWS account root user and to create individual IAM users for each team member who requires access.
Securing the root user with multi-factor authentication (MFA) protects the root account from credential theft. Creating individual IAM users ensures distinct identities, which supports traceability and facilitates implementing specific permissions for each team member.

Step-by-Step Solution

1
Review account-level security best practices.
Identify that securing the root account with multi-factor authentication (MFA) is the highest priority first step.
The root user has complete administrative control over the entire AWS account, so securing it prevents full-scale compromises.
2
Evaluate user-level credential provisioning policies.
Determine that individual team members must be assigned their own distinct IAM users rather than sharing root or general user credentials.
This establishes accountability and enables administrators to grant permissions using the principle of least privilege.

Key Concept

Applying core IAM best practices to protect account resources by isolating root privileges and utilizing individual user identities.
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic