IAM and Identity Center Deep Dive Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Security Controls

What you'll be asked

  1. What is the primary purpose of AWS IAM Identity Center (successor to AWS SSO) in a multi-account environment?
  2. When designing access controls for an organization, why is it recommended to use Permission Sets in Identity Center rather than attaching inline policies to individual IAM users?
  3. A developer needs temporary access to an S3 bucket in a 'Production' account. Using Identity Center, what is the best practice for granting this access?
  4. Your organization uses an external Identity Provider (IdP) like Okta or Azure AD. How does Identity Center integrate with this to ensure security?
  5. You have a Permission Set with an inline policy that explicitly denies 's3:DeleteBucket'. A group assigned this Permission Set is also a member of another group that has a Permission Set with 'AdministratorAccess' (which includes 's3:*'). What is the resulting effective permission for the user?

Answers and explanations come after you submit.