Chapter 3 – Managing AWS Security with Identity and Access Management
None. It isn't recommended to keep using the root account for any other case than emergency access to the account.
MFA is the procedure of entering multiple authentication factors when logging in – for example, a username will require the user's password and a Time-based One-time Password (TOTP) or certificate to authenticate.
Set the minimum password length; require at least one uppercase or lowercase character; number or special character; allow users to change their own passwords; enable password expiration after a number of days; prevent the reuse of passwords, enable administrative reset on expired passwords.
Users, Groups, Roles, and Policies.
Yes.
You can't retrieve an existing secret access key. A new key needs to be created.
Create a role with the appropriate S3 access and assign the role to the EC2 instance.
Use corporate directory federation, STS, and roles to authenticate users within your existing directory and grant them access to AWS resources.
False: CloudTrail is now enabled on all accounts by default and provides seven days of data so we can identify the user that deleted the EC2 instance.
