AWS Identity and Access Management (CLF-C02)

Welcome to the AWS Identity and Access Management practice lab. In this module, you will be provided with the instructions and devices needed to develop your hands-on skills.

Password policies within AWS Identity and Access Management (IAM) establish requirements for password attributes such as complexity, expiration, and improving account security. The AWS Secrets Manager provides a secure vault for storing and managing sensitive credentials such as database passwords and API keys, ensuring their protection and facilitating automated rotation. API keys serve as authentication tokens for secure communication between applications and AWS services. The AWS Systems Manager Patch policies automate the application of security patches across EC2 instances, enhancing system integrity, and mitigating vulnerabilities. By implementing measures such as these, organizations can strengthen their AWS environments and comply with security best practices.

Overview

Learning Outcomes

In this module, you will complete the following exercises:

  • Exercise 1 – Password Policy
  • Exercise 2 – API Key
  • Exercise 3 – Patch Policy

After completing this module, you should be able to:

  • Create a custom password policy.
  • Create an API key.
  • Create a custom patch policy.

Exam Objectives

The following exam objectives are covered in this module:

2.3 Identify AWS access management capabilities

  • Knowledge – Identity and access management (for example, AWS IAM)
  • Skills – Understanding access keys, password policies, and credential storage (for example, AWS Secrets Manager, AWS Systems Manager)
  • Skills – Defining groups, users, custom policies, and managed policies in compliance with the principle of least privilege
Courses