<rss xmlns:atom="http://www.w3.org/2005/Atom" version="2.0">
    <channel>
        <title>AWS - Tag - ThanhLD Site</title>
        <link>https://ducthanh98.github.io/tags/aws/</link>
        <description>AWS - Tag - ThanhLD Site</description>
        <generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Mon, 28 Nov 2022 22:58:35 &#43;0700</lastBuildDate><atom:link href="https://ducthanh98.github.io/tags/aws/" rel="self" type="application/rss+xml" /><item>
    <title>AWS Certified Solutions Architect Professional Notes</title>
    <link>https://ducthanh98.github.io/posts/aws-sap/</link>
    <pubDate>Mon, 28 Nov 2022 22:58:35 &#43;0700</pubDate>
    <author>ThanhLD</author>
    <guid>https://ducthanh98.github.io/posts/aws-sap/</guid>
    <description><![CDATA[DDOS Type Application Layer: HTTP flood Protocol Attack: SYN Flood Volumetric: DNS Amplification Identify and Federation Policy Priorty Explicit DENY -&gt; SCP -&gt; Resource Policy -&gt; Permissions Boundaries -&gt; Session Policies -&gt; Identity Policies
Directory Service AD Connector: Only redirects no local identity data in AWS Simple AD: AD compatible managed on AWS AWS Managed MS AD: Establish trust connection with your on-premise AD Support AD Native schema extensions which required by some AD applications Large userS Integrates with radius/MFA IAM: Explicit DENY has precedence over ALOW NotAction: explicit allow a FEW THING in there Access Advisor: See permissions granted and when last accessed Access analyzer: Analyze resources that are shared with external entity Access Key: Can have two access keys Can be created, deleted, made inactivate or activate STS When you assume a role, you give up your permissions and take the permissions assigned to the role and vice versa Temporary credentials can&rsquo;t be cancelled Changing the trust policy has no impact on existing credentials Revoking the leaked credentials: Denying access to credentials created by AssumeRole, AssumeRoleWithSAML, or AssumeRoleWithWebIdentity Delete role, change permisisons impact all assumers you must have the PutRolePolicy to attach the AWSRevokeOlderSessions inline policy Denying access to credentials created by GetFederationToken or GetSessionToken edit or delete the policies that are attached to the IAM user Note: You cannot change the permissions for an AWS account root user so we recommend that you do not call GetFederationToken or GetSessionToken as a root user.]]></description>
</item>
</channel>
</rss>
