AWS IAM Overview Quiz

AWS Cloud Foundations & IAM - Module 1

• AWS Global Infrastructure is built around Regions and Availability Zones (AZs)
• An AWS Region is a physical location globally with multiple AZs
• AZs are composed of one or more data centers, each with redundant power, networking, and connectivity, located in separate facilities
• Each Region is completely independent
• Availability Zones within a Region are interconnected via low-latency links

Regions

• A region is a geographical area
• Each region contains three or more availability zones
• Each AWS Region is isolated from other Amazon Regions
• Each AWS Region consists of multiple Availability Zones and data centers
• Data can be replicated within and between regions using private or public internet connections
• Complete control and ownership of the region where data is physically located

AWS Cloud Availability Zones

• An Availability Zone is a single data center or group of data centers in a region
• Data Centers in an Availability Zone are geographically dispersed for disaster resilience
• Data centers are located many miles apart for disaster preparedness
• Proximity maintains low latency

AWS Global Infrastructure

• Every region is interconnected in a high bandwidth, fully redundant network
• Each region consists of two or more Availability Zones
• Availability Zones are composed of one or more Data Centers
• Local Zones extend regions closer to end users

Local Zones

• AWS Local Zones place compute, storage, database, and other selected AWS services closer to end users.
• Easy run of highly demanding applications with single-digit millisecond latencies to end-users
• AWS Local Zones are extensions of AWS Regions
• High-bandwidth, secure connection between local workloads and the AWS Region

AWS Wavelength

• Enables developers to build applications that deliver single-digit millisecond latencies to mobile devices and end users
• Deploys applications to Wavelength Zones embedding AWS compute and storage services within telecommunication providers' datacenters at the 5G network's edge
• Seamlessly accesses all AWS services in the region
• Minimizes latency connecting to an application from a mobile device

AWS Outposts

• Brings native AWS services, infrastructure, and operating models to virtually any data center, co-location space, or on-premises facility
• Enables seamless use of same AWS APIs, tools, and infrastructure across on-premises and AWS cloud to create a consistent hybrid experience
• Designed for connected environments to support workloads needing to remain on-premises due to low latency or local data processing needs

Edge Locations and Regional Edge Caches

• Edge locations are Content Delivery Network (CDN) endpoints for CloudFront
• Over 200 edge locations currently available across regions
• Regional Edge Caches sit between CloudFront Origin servers and Edge Locations
• Regional Edge Caches have larger cache widths than individual Edge Locations

AWS Shared Responsibility Model

• Security and compliance are a shared responsibility between AWS and the customer
• Security 'of' the cloud—AWS controls components from the software virtualization layer to the physical security of facilities. Responsible for protecting infrastructure supporting AWS cloud services
• Security 'on' the cloud—The customer is responsible for data encryption (at rest and in transit), network configuration (including security groups), and configuration of operating systems (and updates) used in AWS compute instances.

IAM - Identity and Access Management

• Manages Amazon Web Services (AWS) users and their access to AWS accounts and services
• Controls the level of access users have to an AWS account
• Allows users to utilize different features of an AWS account
• Used to manage users, groups, roles, and access policies
• The root account holds all administrative rights and access to all account parts

How IAM Works

• IAM verifies user or service authorization to access particular services in the AWS Cloud
• Used to grant appropriate access levels to specific users, groups, or services

IAM Policies

• Manage access to AWS resources by attaching to IAM identities or AWS resources
• Defines permissions for AWS identities and AWS resources
• Validates requests to determine if they are allowed or denied
• Stored in JSON format; number of policies depends on required permissions

IAM Entities

• IAM users, groups, and roles
• Policies attached to a particular entity defines the permissions associated with that entity

IAM Identities

• IAM identities help control AWS resource access
• Created using the root user
• Categorized as users, groups, and roles

Test your knowledge on AWS Identity and Access Management (IAM) essentials. This quiz covers key concepts like IAM groups, roles, security features, and account control. Perfect for individuals looking to deepen their understanding of AWS IAM functionalities.