Examkin

Question

Difficulty: MediumIdentity and Access Management (IAM)

A startup is establishing its initial AWS environment and wants to secure access controls for its development team and applications running on Amazon EC2. Which of the following actions represent AWS-recommended security best practices? (Select TWO)

  1. Enable Multi-Factor Authentication (MFA) on the AWS account root user and restrict its usage to essential account management tasks.Answer
  2. Define IAM roles with temporary credentials to grant applications running on Amazon EC2 instances access to other AWS resources.Answer
  3. C
    Perform daily administrative tasks and routine development work using the AWS account root user credentials.
  4. D
    Configure applications running on Amazon EC2 instances to authenticate using permanent IAM user access keys stored directly in the application configuration files.
  5. E
    Rely on AWS to write, configure, and maintain all internal customer IAM policies under the Shared Responsibility Model.

Answer

The correct practices are to enable Multi-Factor Authentication (MFA) on the root user and restrict its use, and to use IAM roles with temporary credentials for applications running on EC2 instances.
The correct options are to enable MFA on the AWS account root user and restrict its usage, and to define IAM roles with temporary credentials for applications running on EC2. These follow AWS security guidelines by locking down the root user and avoiding the use of hardcoded, permanent credentials for applications.

Step-by-Step Solution

1
Review the requirements to secure developer access and EC2 applications.
Identify that developer access requires distinct credentials and applications must avoid hardcoded secret keys.
AWS security practices advise against sharing access credentials and storing static credentials in environments where they can be compromised.
2
Select the correct AWS Identity and Access Management (IAM) configurations that support these principles.
Identify that enabling MFA on the root user protects the account, and assigning IAM roles to EC2 instances provides temporary credentials dynamically.
MFA prevents unauthorized root level access, and IAM roles prevent credential leaks by avoiding the use of permanent keys.

Key Concept

AWS Identity and Access Management (IAM) Best Practices
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic