8. Wrap up

1. Using SAML, you can give your federated users single sign-on (SSO) access to the AWS Management Console. (True)

2. Power User Access allows Access to all AWS services except the management of groups and users within IAM.

3. A role is a document that provides a formal statement of one or more permissions.

4. Don't forget to read white papers https://aws.amazon.com/whitepapers/

5. Note that the IAM account sign-in URL is different from the Root account sign-in URL

6. In what language are policy documents written? (JSON)

7. To save administration headaches, Amazon recommends that you leave all security groups in web-facing subnets open on port 22 to 0.0.0.0/0 CIDR. That way, you can connect wherever you are in the world. (False)

8. What is the default level of access a newly created IAM User is granted? (NO access)