Question : AcmeShell Inc has created IAM users ans wants those users to work independently and access AWS. Which of the below mentioned options is not a possible solution? 1. Provide each user with the IAM login and password for the AWS console 2. Create the X.509 certificate for each user and provide them access to AWS CLI 3. Access Mostly Uused Products by 50000+ Subscribers 4. Create the access key and secret access key for each user and provide access to AWS using the console
Explanation: AWS Identity and Access Management is a web service that enables Amazon Web Services (AWS) customers to manage users and user permissions in AWS. The service is targeted at organizations with multiple users or systems that use AWS products such as Amazon EC2, Amazon RDS, and the AWS Management Console. With IAM, you can centrally manage users, security credentials such as access keys, and permissions that control which AWS resources users can access.
Without IAM, organizations with multiple users and systems must either create multiple AWS accounts, each with its own billing and subscriptions to AWS products, or employees must all share the security credentials of a single AWS account. Also, without IAM, you have no control over the tasks a particular user or system can do and what AWS resources they might use.
IAM addresses this issue by enabling organizations to create multiple users (each user is a person, system, or application) who can use AWS products, each with individual security credentials, all controlled by and billed to a single AWS account. With IAM, each user is allowed to do only what they need to do as part of the user's job. If an organization has created the IAM users, the users can access AWS services either with an IAM specific login/password or console. The organization can generate the IAM X.509 certificates to access AWS with CLI. The organization can also enable MFA for each IAM user, which allows an added security for each IAM user. If the organization has created the access key and secret key than the user cannot access the console using those keys. Access key and secret access key are useful for CLI or Webservices.
Question : HadoopExam (with AWS account ID ) has created IAM users for its organization's employees. HadoopExam wants to make the AWS console login URL for all IAM users as: https:// HadoopExam.signin.aws.amazon.com/console/. How can this be configured? 1. For the AWS account, create an alias HadoopExam for the IAM login 2. The user needs to use Route 53 to map the HadoopExam domain and IAM URL 3. Access Mostly Uused Products by 50000+ Subscribers 4. It is not possible to have capital letters as a part of the alias name
Correct Answer : Get Lastest Questions and Answer : Explanation: If a user wants the URL of the AWS IAM sign-in page to have the company name instead of the AWS account ID, he can create an alias for his AWS account ID. The alias must be unique across all Amazon Webservices products and contain only digits, lowercase letters, and hyphens. Finding Your AWS Account ID
To find your AWS account ID number in the AWS Management Console, click on Support in the navigation bar in the upper-right, and then click Support Center. Your currently signed in account ID appears below the Support menu. About Account Aliases
If you want the URL for your sign-in page to contain your company name (or other friendly identifier) instead of your AWS account ID, you can create an alias for your AWS account ID. This section provides information about AWS account aliases and lists the API actions you use to create an alias.
Your sign-in page URL has the following format, by default.
If you create an AWS account alias for your AWS account ID, your sign-in page URL will look like the following example.
https://youralias.signin.aws.amazon.com/console/
Note : The original URL containing your AWS account ID remains active after you create your AWS account alias.
Tip : To create a bookmark for your account's unique sign-in page in your web browser, you should manually enter your account's sign-in URL in the bookmark entry. Don't use your web browser's "bookmark this page" feature.
Question : AcmeShell.com is hosted on EC and Amit is an IAM user who has access to the EC services. Admin is an IAM user who has access to all the AWS services including IAM. Can Amit change his password? 1. Yes, only from AWS CLI 2. Yes, provided Admin has given Bob access to change his password 3. Access Mostly Uused Products by 50000+ Subscribers 4. No, the IAM user can never change the password
Explanation: The IAM users by default cannot change their password. The root owner or IAM administrator needs to set the policy in the password policy page, which should allow the user to change their password. Once it is enabled, the IAM user can always change their passwords from the AWS console or CLI. If users have been granted permission to change their own passwords, they can use a special page in the AWS Management Console to do this. They can also use the command line interface or the IAM API. Using your IAM user name and password, sign in to the console using the special URL for your account, which looks like this:
To get the URL for the sign-in page, contact your administrator.
In the navigation bar of the console, click the arrow next to your user name and then click Security Credentials.
AWS Management Console Security Credentials link
In the Old Password box, enter your current password. Enter a new password in the New Password and Confirm New Password boxes and then click Change Password.