Podcast
Questions and Answers
What is a challenge when managing credentials for applications running on EC2 instances?
What is a challenge when managing credentials for applications running on EC2 instances?
- Using static credentials for all applications
- Sharing credentials openly with all users on the same instance
- Securely distributing credentials to each instance, especially those created by AWS (correct)
- Automatically rotating credentials on instances
What method is recommended for retrieving session credentials for Amazon EC2 workloads?
What method is recommended for retrieving session credentials for Amazon EC2 workloads?
- Passing session tags for attribute-based access control (ABAC)
- Retrieving session credentials using a specific method described below (correct)
- Creating a new set of the same temporary role session credentials for each request
- Using sts:AssumeRole to assume the same role associated with the instance
What error may occur if you try to assume a role without creating the required trust policy?
What error may occur if you try to assume a role without creating the required trust policy?
- CredentialsError
- TrustPolicyMissing error
- AccessDenied error (correct)
- AccessGranted error
When should role assumption calls using sts:AssumeRole be avoided?
When should role assumption calls using sts:AssumeRole be avoided?
Why is it important to update credentials on each EC2 instance when rotating AWS credentials?
Why is it important to update credentials on each EC2 instance when rotating AWS credentials?
What kind of strategy is suggested for managing credentials for applications that run on EC2 instances?
What kind of strategy is suggested for managing credentials for applications that run on EC2 instances?
What is the purpose of using IAM roles in AWS?
What is the purpose of using IAM roles in AWS?
How are IAM roles specified for instances in AWS?
How are IAM roles specified for instances in AWS?
What type of permissions can be granted using IAM roles?
What type of permissions can be granted using IAM roles?
When creating IAM roles, what kind of policies should be associated with them?
When creating IAM roles, what kind of policies should be associated with them?
Can one attach multiple IAM roles to an instance in AWS?
Can one attach multiple IAM roles to an instance in AWS?
What is the purpose of an instance profile in AWS?
What is the purpose of an instance profile in AWS?
