CLOUD COMPUTING

Detailed explanation-1: -trust policy is a required component of IAM role. You can’t make a role without a trust policy.

Detailed explanation-2: -The administrator of the specified account can grant permission to assume this role to any IAM user in that account. To do this, the administrator attaches a policy to the user or a group that grants permission for the sts:AssumeRole action. That policy must specify the role’s ARN as the Resource .

Detailed explanation-3: -When you create an IAM user, you can choose to allow console or programmatic access. If console access is allowed, the IAM user can sign in to the console using their sign-in credentials. If programmatic access is allowed, the user can use access keys to work with the CLI or API.

Detailed explanation-4: -A developer with an administrative AWS account can allow a user to assume an IAM role. To do that, you create a new policy and attach it to that user.

Detailed explanation-5: -Add user to group – Make the user a member of a group. Copy permissions from existing user – Copy all group memberships, attached managed policies, inline policies, and any existing permissions boundaries from the source user. More items