Soru

Zorluk: KolayIdentity and Access Management (IAM)

A company wants to grant a team of new developers access to manage AWS resources. All developers in the team require the same permissions. Which of the following actions align with AWS Identity and Access Management (IAM) security best practices to accomplish this? (Select TWO.)

  1. Create an IAM group with the required permissions attached, and add individual developer user accounts to this group.Cevap
  2. Enable multi-factor authentication (MFA) on each individual developer's IAM user account.Cevap
  3. C
    Share the AWS account root user credentials among the developers to avoid management overhead.
  4. D
    Create a single IAM user, assign it administrative permissions, and share its login credentials with all team members.
  5. E
    Create an IAM role and distribute the role's long-term access keys to all developers for daily console logins.

Cevap

Creating an IAM group with the required permissions attached, adding developer user accounts to this group, and enabling multi-factor authentication (MFA) on each developer's IAM user account.
Configuring permissions using IAM groups ensures administrative efficiency and uniform policy application. Securing individual accounts with multi-factor authentication (MFA) adds essential protection to human access identities.

Adım Adım Çözüm

1
Determine the best practice for applying identical permissions to multiple users.
Utilize an IAM group to consolidate and manage permissions for the entire team in one place.
This prevents configuration drift and simplifies permission management.
2
Determine the best practice for protecting individual credentials.
Apply Multi-Factor Authentication (MFA) to all individual accounts.
MFA provides additional protection if a user's password is stolen or guessed.

Anahtar Kavram

Foundational IAM Best Practices (Groups and MFA)
Bu soruyu puanla