AWS Identity and Access Management Questions

Designing and operating identity and access management in Amazon Web Services environments. Topics include policy and role design, resource based policies, cross account roles and trust relationships, service principals and role assumption patterns, temporary credentials and security token service usage, permission boundaries and permission delegation, attribute based and role based access control patterns, identity federation and single sign on, integration with external identity providers, policy testing and simulation, automation via infrastructure as code, and operational monitoring and audit using logging and access analysis tools. Candidates should be able to reason about multi account architectures, least privilege patterns, delegation trade offs, and techniques to detect and remediate excessive permissions.