Question

After initial login, what does AWS recommend as the best practice for the AWS account root user?

Delete the AWS account root user

Revoke all permissions on the AWS account root user

Delete the access keys of the AWS account root user

Restrict permission on the AWS account root user

When creating an AWS Identity and Access Management (IAM) policy, what are the two types of access that can be granted to a user? (Choose two.)

Authorized access

Administrative root access

Institutional access

AWS Management Console access

Programmatic access

Which of the following are best practices to secure your account using AWS Identity and Access Management (IAM)? (Choose two.)

Leave unused and unnecessary users and credentials in place.

Manage access to AWS resources.

Provide users with default administrative privileges.

Avoid using IAM groups to grant the same access permissions to multiple users.

Define fine-grained access rights

Answer 1

After the initial login, the AWS recommends as the best practice of AWS account root user is Delete the access keys of the AWS account root user.

When creating an AWS identity and access managment IAM policy there are two types access can be granted to the user:

• Administrative root access
• AWS Management Console access

Best practices to secure your account using AWS Identity and Access Management (IAM):

• Manage access to AWS resources.

• Define fine-grained access rights