Interview Q&A / AWS & Cloud

1. What is the difference between IAM users, groups, roles and policies in AWS?

   A user is an identity for one person or app with long-term credentials. A group is a set of users that share permissions. A role is an identity that anyone or anything trusted can assume to get temporary credentials. A policy is the JSON document that says what is allowed or denied. Grant only the permissions needed, which is least privilege.

   BeginnerIn-depth4 min read
2. How would you give a user read-only access to one specific S3 bucket?

   Attach an identity policy that allows s3:ListBucket on the bucket ARN and s3:GetObject on the objects inside it using the bucket ARN with /*. Nothing else is allowed, so the user can read but not write or delete.

   IntermediateQuick answer1 min read