# Assignment Interview question

1. What is the need of IAM?
  IAM makes it easy to manage users and what role they play in the organization   
  specify who or what can access services and resources in AWS

2. If i am a non tech person, how will you define policies in IAM?
     policies  are the set of rules in which it is defined to a user so that he can use to manage the services that his given to him

3. Please define a scenerio in which you would like to create your on own IAM policy. 
   create an IAM user that should only read IAM users 

4. Why do we prefer not using root account?
  The root user has access to every AWS service and resource in an account. If the credentials for the root account are stolen they will be able to access or change anything in the account giving them the ability to misuse any data or resources 

5. How to revoke policy for an IAM user?
     1. login to console 
     2. go to IAM and then to roles
     3. select which role u want go to that role dashboard
     4. go to Revoke sessions tab  and click on Revoke active sessions 
     5.  AWS asks you to confirm the action. Select the I acknowledge that I am revoking all active sessions 
           for this role. check box and choose Revoke active sessions on the dialog box

6. Can a single IAM user be a part of multiple policy via group
and root? how? 
     yes single user can be part of multiple policy via group . one user can be a part of multiple group but one group can not be part of multiple group .