That way the EC2 instance can directly access S3 without having to manage usernames, passwords, etc. you might have an EC2 instance, and give it a role saying it can access S3. You can create roles, then assign them to AWS resources. you can have groups for different departments such as Sales, Developers, HR, etc, which may all require different levels of AWS access. Save them in a secure location.Īre a collection of IAM users, simplifying the assigning of permissions. If you lose them, they need to be regenerated.
Cloud guru aws solution architect associate password#
IAM can be used to create and customise password rotation policies. IAM consists of Users, Groups Roles, and Policy Documents Usersīy default, new users don’t have access to any AWS services.Īlways set up MFA (Multifactor Authentication) on your root account. Supports Identity Federation which can be used for Single Sign-on i.e.Is global - there is no concept of regional IAM at this time all users, groups, policies, etc are available in all regions.Gives you centralised control of an AWS account.This post was last updated in March, 2019.
Please let me know in the comments below if you have any corrections or updates which you’d like me to add.
Since the AWS platform is changing so quickly, it’s possible that some of these notes may be out of date, so please take that into consideration if you are reading them. Primarily, they’re notes for me, but you might find them useful too. These notes are partly from the videos, and also from various other online sources. These notes were written while working through the A Cloud Guru AWS Certified Solutions Architect - Associate online course.
0 kommentar(er)
