CloudGuild · Blog · Cheat sheets · Lessons · Certifications
AWS Certified Security - Specialty Exam Question Walkthrough
Master AWS security concepts with our detailed walkthrough of a key exam question, focusing on access management.
Understanding AWS services is crucial for the Security - Specialty exam. Candidates often stumble on questions about access management, as multiple services touch on security but serve different purposes.
The question
What AWS service allows you to manage access to your AWS resources through identity policies, resource policies, and permissions boundaries?
A. AWS Shield
B. AWS IAM
C. AWS WAF
D. AWS Config
Think before you scroll
Take a moment to consider each option. Identify which service specifically addresses access management. Remember that while many AWS services enhance security, they do not all focus on managing user permissions directly.
The answer
The correct option is B. AWS IAM. AWS Identity and Access Management (IAM) is designed to manage access to AWS resources through policies, making it the clear choice here.
Why the other options lose
A. AWS Shield: This service protects against Distributed Denial of Service (DDoS) attacks. It does not manage user permissions or access to resources, so it is irrelevant to this question.
C. AWS WAF: Web Application Firewall (WAF) protects web applications from common web exploits. While it enhances security, it does not deal with identity or access management.
D. AWS Config: This service tracks AWS resource configurations and compliance. It is essential for auditing but does not manage access permissions.
The concept behind it
Access management in AWS revolves around IAM. IAM allows for fine-grained control of permissions through identity policies, resource policies, and permissions boundaries. Knowing this service's role is critical for security and compliance.
Exam trap to remember
Remember: IAM is the go-to service for managing access. If the question focuses on access management, IAM is often the answer.