Security & Compliance第 51 / 100 题
Which statement best distinguishes an IAM user from an IAM role?
a.A role always has a permanent password, while a user never does
b.A user represents a specific identity with long-term credentials, while a role is assumed temporarily by trusted entities
c.Roles can only be used by AWS employees
d.Users cannot be assigned any permissions
解析
An IAM user is a persistent identity with its own long-term credentials, whereas an IAM role is assumed temporarily and provides short-term credentials to whoever or whatever assumes it. Roles are ideal for granting access to applications, services, or federated users.
免费刷完整 100 道题库 — 无需注册。
同考点相关题目
- Which of the following is an IAM best practice?
- Which service aggregates security findings from services like GuardDuty, Inspector, and Macie into a single dashboard and runs automated best-practice checks?
- A customer stores objects in Amazon S3 and wants AWS to manage the encryption keys and apply encryption automatically. Which option fits?
- According to the shared responsibility model, who is responsible for classifying data and configuring access controls on it?
- Which service would you use to get automated recommendations that include security checks such as identifying publicly accessible resources or missing MFA on the root account?
- What is the benefit of using temporary security credentials provided by IAM roles instead of long-term access keys?