A financial services company is setting up daily administrative access to their AWS infrastructure for a new operations team. To comply with security audits, they must ensure individual accountability and adhere to the principle of least privilege. Which of the following security practices should the company implement? (Select TWO.)
- Create individual IAM users for each team member and assign permissions by placing them in an IAM group with appropriate policies.Answer
- Enable Multi-Factor Authentication (MFA) for each individual user account and the AWS account root user.Answer
- CPerform daily administrative tasks using the AWS account root user credentials to avoid configuration delays.
- DShare a single administrative IAM user account with multiple access keys to simplify credential rotation.
- EOpen an AWS Support case to have AWS configure and manage individual user access keys.
Answer
Create individual IAM users for each team member, manage their permissions using IAM groups, and enable Multi-Factor Authentication (MFA) on all accounts.
Establishing individual IAM users and organizing them into groups ensures that user activity is auditable and permissions adhere to the principle of least privilege. Requiring MFA for all users, including the root user, enforces a strong secondary layer of access validation to protect resources from credential leakage.
Step-by-Step Solution
Key Concept
AWS Identity and Access Management (IAM) Security Best Practices
Estimated Time:1m 30s