Create a table that lists 5 common tasks (like data backup, user password reset, server patching, network monitoring, and encryption key management) and clearly mark whether each is the responsibility of the cloud provider or the user in the AWS Shared Responsibility Model.
2.
Log in to the AWS Management Console and create a new IAM user named 'zomato-analytics' with programmatic access only. Attach the 'AmazonS3ReadOnlyAccess' policy to this user.
3.
Create a custom IAM policy in AWS named 'EC2StartStopPolicy' that allows starting and stopping EC2 instances but denies all other EC2 actions. Attach this policy to a new IAM role called 'ec2-operator'.
Hint: Use the AWS Policy Generator or Visual Editor to specify 'ec2:StartInstances' and 'ec2:StopInstances' actions.
4.
Simulate a scenario where a user tries to access an S3 bucket without the required permissions. Remove 'AmazonS3ReadOnlyAccess' from the 'zomato-analytics' user and attempt to list the bucket contents. Take a screenshot of the error message and explain in 2-3 sentences why this happened according to the Shared Responsibility Model.
5.
Use AWS IAM Policy Simulator to test if the 'ec2-operator' role you created can terminate EC2 instances. Document the result and explain how the policy you attached enforces least privilege.
Create a table that lists 5 common tasks (like data backup, user password reset, server patching, network monitoring, and encryption key management) and clearly mark whether each is the responsibility of the cloud provider or the user in the AWS Shared Responsibility Model.
2.
Log in to the AWS Management Console and create a new IAM user named 'zomato-analytics' with programmatic access only. Attach the 'AmazonS3ReadOnlyAccess' policy to this user.
3.
Create a custom IAM policy in AWS named 'EC2StartStopPolicy' that allows starting and stopping EC2 instances but denies all other EC2 actions. Attach this policy to a new IAM role called 'ec2-operator'.
Hint: Use the AWS Policy Generator or Visual Editor to specify 'ec2:StartInstances' and 'ec2:StopInstances' actions.
4.
Simulate a scenario where a user tries to access an S3 bucket without the required permissions. Remove 'AmazonS3ReadOnlyAccess' from the 'zomato-analytics' user and attempt to list the bucket contents. Take a screenshot of the error message and explain in 2-3 sentences why this happened according to the Shared Responsibility Model.
5.
Use AWS IAM Policy Simulator to test if the 'ec2-operator' role you created can terminate EC2 instances. Document the result and explain how the policy you attached enforces least privilege.