[ACC 스터디 1주차] section 1. Introduction AWS ~ section 4. IAM & AWS CLI

AWS : cloud provider 

servers and services that you can use on demand and scale easily

region: cluster of data centers

AWS has regions all around the world

most aws services are region-scoped 

지역 선택 방법

: compliance 준수

: proximity 근접성

: available services

:  pricing

AWS Availability Zones

: descrete data centers with 불필요한 power, networking and connectivity

 

IAM password policy - strong하게 하기

MFA (multi factor authentication) - 해킹안당하게 

 

AWS 접근법

1) AWS management console

Access Key secret Access Key

2) AWS CLI

3) AWS SDK

 

AWS CloudShell

명령어

aws iam list-users

aws iam list-users --region

 

IAM Role for services

permissions to AWS services with IAM roles

Lamda function roles/ roles for cloudformation / EC2 instance roles

 

IAM security Tools

1) IAM Credentials Report (account-level)

2) IAM Access Advisor (user-level)

 

one physical user = one AWS user

 users -> groups  

permissions -> groups

user Access keys for (CLI / SDK)

 

users: mapped to a physical user 

groups : contains users only 

policies: JSON document that outlines permissions for users or groups

roles: for EC2 instances or AWS services

security: MFA + password policy

AWS CLI:

AWS SDK:

Access Keys: access AWS using the CLI or SDK

Audit: IAM credential reports and IAM access advisor

 

 

 

quiz

IAM User Groups can contain IAM Users and other User Groups. - false

IAM User can belong to multiple User Groups - true

IAM Users access AWS services using root account crendentias - false