IAM roles concept in AWS - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is an IAM role in AWS?

An IAM role is like a set of permissions that you can give to AWS services or users to let them do specific tasks without sharing your personal credentials.

beginner

How is an IAM role different from an IAM user?

An IAM user is a person or service with long-term credentials, while an IAM role is a temporary set of permissions that can be assumed by users or services when needed.

beginner

What does it mean to 'assume' an IAM role?

To 'assume' a role means to temporarily take on the permissions defined by that role to perform tasks, like borrowing a key to access a room for a short time.

intermediate

Why use IAM roles instead of sharing access keys?

IAM roles improve security by avoiding sharing permanent keys. They provide temporary permissions that expire, reducing risk if credentials are exposed.

beginner

Give an example of when you would use an IAM role.

You use an IAM role when an EC2 instance needs to access S3 storage. Instead of storing keys on the instance, the EC2 assumes a role with permission to read S3.

What is the main purpose of an IAM role in AWS?

A To monitor AWS usage

B To create permanent user accounts

C To grant temporary permissions to users or services

D To store data securely

IAM roles provide temporary permissions that can be assumed by users or services.

Which of the following can assume an IAM role?

A Only root account

B Only AWS services

C Only IAM users

D Both IAM users and AWS services

Both IAM users and AWS services can assume roles to gain temporary permissions.

What happens when you assume an IAM role?

A You get permanent access keys

B You receive temporary security credentials

C Your user account is deleted

D You create a new IAM user

Assuming a role provides temporary security credentials for access.

Why is using IAM roles considered more secure than sharing access keys?

A Roles provide temporary credentials that reduce risk

B Roles allow unlimited access

C Roles never expire

D Roles are easier to remember

Temporary credentials from roles reduce the risk of long-term key exposure.

Which AWS service commonly uses IAM roles to access other services securely?

A Amazon EC2

B Amazon S3

C AWS Lambda

D Amazon RDS

Amazon EC2 instances often assume IAM roles to securely access other AWS services.

Explain what an IAM role is and how it helps improve security in AWS.

Think about borrowing permissions instead of sharing keys.

Describe a real-life scenario where you would use an IAM role in AWS.

Consider how an EC2 server accesses S3 without storing keys.