Assignment Interview question

What is the need of IAM? IAM makes it easy to manage users and what role they play in the organization
specify who or what can access services and resources in AWS

If i am a non tech person, how will you define policies in IAM? policies are the set of rules in which it is defined to a user so that he can use to manage the services that his given to him

Please define a scenerio in which you would like to create your on own IAM policy. create an IAM user that should only read IAM users

Why do we prefer not using root account? The root user has access to every AWS service and resource in an account. If the credentials for the root account are stolen they will be able to access or change anything in the account giving them the ability to misuse any data or resources

How to revoke policy for an IAM user?

1. login to console
2. go to IAM and then to roles
3. select which role u want go to that role dashboard
4. go to Revoke sessions tab and click on Revoke active sessions
5. AWS asks you to confirm the action. Select the I acknowledge that I am revoking all active sessions for this role. check box and choose Revoke active sessions on the dialog box

Can a single IAM user be a part of multiple policy via group and root? how? yes single user can be part of multiple policy via group . one user can be a part of multiple group but one group can not be part of multiple group .