Examkin

Soru

Zorluk: KolayIdentity and Access Management (IAM)

A cloud engineer has successfully created a new AWS account for a startup. To secure the account immediately, what is the AWS-recommended best practice for performing daily administrative operations?

  1. A
    Use the AWS account root user for daily operations but enable Multi-Factor Authentication (MFA).
  2. Create an IAM user with administrative permissions and use it for daily tasks, while restricting the root user.Cevap
  3. C
    Delegate all administrative tasks to AWS Support through the shared responsibility model.
  4. D
    Assign an IAM role directly to the root user to perform administrative operations.

Cevap

Create an IAM user with administrative permissions and use it for daily tasks, while restricting the root user.
The AWS-recommended best practice is to secure the root user credentials and avoid using them for daily tasks. Instead, an IAM user with administrative permissions should be created and used for day-to-day administrative operations.

Adım Adım Çözüm

1
Identify the AWS security best practices regarding the root user account.
The root user has unrestricted access to all resources and billing information and should not be used for daily tasks.
Restricting root user usage minimizes the risk of accidental configuration changes or credential compromise.
2
Determine the correct entity for daily administrative tasks.
An IAM user with administrative privileges should be created to manage resources day-to-day.
This allows for proper logging, control, and alignment with the principle of least privilege where appropriate.

Anahtar Kavram

AWS Root Account Security and IAM Administration Best Practices
Bu soruyu puanla

Konular

Identity and Access Management (IAM)

Bu konudan daha fazla soru