Test yourself under real exam conditions: 50 timed questions, 60 on the clock, pass mark 72%%. Instant score with a full review of everything you got wrong. Free — no account needed.
Exam details
The division of security responsibilities between AWS (security OF the cloud: infrastructure, hardware, regions, services) and the customer (security IN the cloud: data, IAM, OS patching, network/firewall config, encryption).
An AMI (Amazon Machine Image), an instance type, a VPC with subnet, a security group, an IAM role/credentials, and optionally key pair and EBS volume.
An IAM user is a permanent identity with long-lived credentials. An IAM role is an identity with no long-lived credentials that is assumed temporarily by users, services, or external identities to obtain temporary STS tokens.
5,120 characters for managed policies attached to a user/group/role; service-specific quotas apply (e.g. inline user policy up to 2,048 chars, group 5,120, role 10,240).
Security Token Service — issues short-lived temporary credentials (access key, secret key, session token) for federated identities, assumed roles, or cross-account access.