Interview Q&A / AWS & Cloud

1. What is the difference between IAM users, groups, roles and policies in AWS?

   A user is an identity for one person or app with long-term credentials. A group is a set of users that share permissions. A role is an identity that anyone or anything trusted can assume to get temporary credentials. A policy is the JSON document that says what is allowed or denied. Grant only the permissions needed, which is least privilege.

   BeginnerIn-depth4 min read
2. How should you protect and use the AWS account root user?

   Enable MFA on the root user, do not create access keys for it, and use it only for the few tasks that need it. For daily work use IAM Identity Center or IAM users and roles with least privilege.

   BeginnerQuick answer1 min read
3. Why use an IAM role for an EC2 instance instead of storing access keys on it?

   A role gives the instance temporary credentials that AWS rotates automatically, so no long-lived secret sits on disk or in code. Access keys can leak through code repos, images or logs and stay valid until someone revokes them.

   BeginnerQuick answer1 min read