AWS Security

Which of the following are IAM entities? (Select TWO).

A company wants to restrict the use of a resource to only one particular user so that they can easily find out when there is a security breach in the use of the resource. What kind of policy will help enforce this measure?

Which part of the CloudFormation template is mandatory during implementation?

The rules in IAM tagging say that the following can have tags attached to them (Select TWO).

As a Solutions Architect to a financial company which is about to migrate its sensitive assets to AWS, you are tasked with ensuring that the permissions that have been put in place to protect the assets from AWS users can actually work as intended when the company moves to AWS. How can you test and be sure that these permissions will actually work as intended?

AWS is responsible for:

A company has 5 branches around the world and each branch has its separate AWS account. Finance department wants to harmonize these accounts into one place to have central view of spending in the whole company. But security department thinks that there should be some policies to restrict access to resources in each account. Which services will help this company to achieve all these requirements? (Select TWO).

A bank wants to move its credit card transactions to AWS but it wants to be sure that it can have control over the management of its encryption keys. The bank does not want to share the hardware that will store its encryption keys with any other person or company. Which service will help the bank to achieve these objectives?

A web app has been developed by a startup company and it is looking for a cost effective way of managing login feature from mobile and web browsers. It is expecting hundreds of thousands of users to login very soon. Which AWS service can this start up use?

Your company is expecting an external audit team to determine the compliance documents the company is using. What AWS service can you point the auditors to before their visit so that they can have an understanding of the compliance documents you use?

A DevOps Engineer wants to create a role with a policy that can terminate the EC2 instance that has some sensitive data when it is compromised by security breach. The DevOps Engineer does not want anybody to assume this role, but he wants only one specific service to assume this role and he does not want the role to be modified by any one or service. How can he achieve this?

A Solutions Architect has created a policy for a company for its IAM users but forgot to test the policy before deployment and she has to submit the policy to the client the next day. Which AWS tool or service can the Solutions Architect quickly use to test if the policy is actually working as intended?

A Systems Administrator has created an IAM user and wants to create AWS services programmatically using this IAM user through the AWS CLI or AWS SDK. How can he achieve this (Choose TWO)?