Questions
Answer the following questions to test your knowledge of this chapter:
- Which two access control models are primarily discussed in the context of AWS IAM, and how do they fundamentally differ in their approach to permissions?
- What is the primary purpose of SCPs in AWS Organizations, and how do they interact with local IAM policies?
- In a multi-account AWS setup, what mechanism allows IAM identities in one account to access resources in another account without sharing access keys, and what are the benefits associated with it?
- In the era of DevOps, why is automating IAM implementation considered crucial, especially in large-scale and multi-account AWS environments?
