Examkin

Soru

Zorluk: OrtaIdentity and Access Management (IAM)

A startup is establishing its cloud environment and wants to secure access for its development team. The developers currently share a single set of credentials to manage AWS resources. Which TWO AWS Identity and Access Management (IAM) best practices should the startup implement to secure its environment? (Select TWO.)

  1. Create individual IAM users for each developer and place them in an IAM group with least-privilege permissions attached.Cevap
  2. Enable multi-factor authentication (MFA) on the AWS account root user and restrict its use to only tasks that require root credentials.Cevap
  3. C
    Allow developers to share the AWS account root user credentials but require them to use a shared virtual MFA device.
  4. D
    Configure a single IAM role with administrator access and distribute its permanent access keys to all developers.
  5. E
    Configure AWS to automatically manage and apply developer permissions as part of the AWS shared responsibility model.

Cevap

The correct practices are to create individual IAM users for each developer within an IAM group, and to enable multi-factor authentication (MFA) on the root user while avoiding its use for daily administrative tasks.
To secure the AWS environment, individual IAM users should be created for each developer to ensure accountability, and they should be organized into IAM groups to simplify permission management using policies. Additionally, the AWS account root user must be secured with multi-factor authentication (MFA) and restricted from daily use, as it has unrestricted administrative privileges.

Adım Adım Çözüm

1
Analyze the security requirements of a development team currently sharing credentials.
Identified the need to establish individual accountability and protect administrative access.
Sharing credentials violates security guidelines and prevents auditing of individual actions.
2
Evaluate identity and access management options for developers.
Determine that creating individual IAM users and using IAM groups simplifies permission management and enforces individual accountability.
This aligns with the principle of least privilege and AWS IAM best practices.
3
Evaluate root account security options.
Determine that the root user should be secured with MFA and not used for daily administration tasks.
The root user has unrestricted access and poses a significant security risk if compromised.

Anahtar Kavram

AWS IAM Best Practices for Account Security and User Management
Bu soruyu puanla

Konular

Identity and Access Management (IAM)

Bu konudan daha fazla soru