Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM)

An organization is setting up AWS accounts for its new development team. To ensure a secure cloud environment, which of the following are AWS Identity and Access Management (IAM) best practices that the organization should implement? (Select TWO.)

  1. Apply the principle of least privilege by granting only the minimum permissions required for developers to perform their tasks.Answer
  2. Enable Multi-Factor Authentication (MFA) for the AWS account root user and administrative users.Answer
  3. C
    Use the AWS account root user access keys for everyday coding and administrative tasks to prevent access issues.
  4. D
    Embed permanent IAM user access keys directly within the application code running on Amazon EC2 instances to access other AWS services.
  5. E
    Rely on AWS to automatically configure and rotate user passwords and manage IAM policy permissions under the Shared Responsibility Model.

Answer

Implementing the principle of least privilege and enabling Multi-Factor Authentication (MFA) for privileged accounts are essential IAM security best practices.
Granting only the permissions required to perform a job (least privilege) and enabling Multi-Factor Authentication (MFA) for administrative and root accounts are fundamental AWS security practices that reduce unauthorized access risk.

Step-by-Step Solution

1
Analyze each option to determine if it aligns with AWS Identity and Access Management (IAM) security guidelines.
Identified that least privilege and multi-factor authentication (MFA) are recommended best practices, while sharing root credentials, hardcoding user access keys, and expecting AWS to manage permissions are incorrect practices.
AWS security best practices emphasize minimizing access (least privilege) and securing credentials (MFA), while delegating tasks to specific IAM roles instead of using root or permanent user keys.

Key Concept

AWS IAM Best Practices
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic