Identity & Governance

Users — mapped to a physical person. Has credentials for Console (password) or programmatic access (access keys).

Units

Practice questions

Generated from this module’s study material.

1. What best describes "Detective guardrails" in this context?

use SCPs (e.g., restrict regions)use AWS Config (e.g., find untagged resources)use in resource policies to restrict access to accounts within your AWS Organization.for CLI/SDK access. Access Keys: Never share them. Access Key ID ≈ username; Secret Access Key ≈ password.

2. What best describes "User Pools" in this context?

restrict which region API calls targetsign-in for web/mobile apps. Username/password, social sign-in (Google, Facebook), SAML. Integrates with API Gateway and ALB.AD-compatible managed directory, can't join to on-premises AD.restrict API calls by client IP

How to use this

Open a unit and mark it complete when you are ready to move on.

Module progress

0/0 complete · 0%

Back to modules Next module: Security Controls