A sysadmin has created the below mentioned policy on an S3 bucket named cloudacademy. What
does this policy define?
“Statement”: [{
“Sid”: “Stmt1388811069831”,
“Effect”: “Allow”,
“Principal”: { “AWS”: “*”},
“Action”: [ “s3:GetObjectAcl”, “s3:ListBucket”],
“Resource”: [ “arn:aws:s3:::cloudacademy]
}]

An organization (account ID 123412341234. has configured the IAM policy to allow the user to
modify his
credentials. What will the below mentioned statement allow the user to perform?
{
“Version”: “2012-10-17”,
“Statement”: [{
“Effect”: “Allow”,
“Action”: [
“iam:AddUserToGroup”,
“iam:RemoveUserFromGroup”,
“iam:GetGroup”
],
“Resource”: “arn:aws:iam:: 123412341234:group/TestingGroup”
}]

A user has configured ELB with two EBS backed instances. The user has stopped the instances
for 1 week to save costs. The user restarts the instances after 1 week. Which of the below
mentioned statements will help the user to understand the ELB and instance registration better?

A user is trying to connect to a running EC2 instance using SSH. However, the user gets a Host
key not found error. Which of the below mentioned options is a possible reason for rejection?

A user has hosted an application on EC2 instances. The EC2 instances are configured with ELB
and Auto Scaling. The application server session time out is 2 hours. The user wants to configure
connection draining to ensure that all in-flight requests are supported by ELB even though the
instance is being deregistered. What time out period should the user specify for connection
draining?

A user is using the AWS EC2. The user wants to make so that when there is an issue in the EC2
server, such as instance status failed, it should start a new instance in the user’s private cloud.
Which AWS service helps to achieve this automation?

A sys admin has enabled logging on ELB. Which of the below mentioned fields will not be a part of
the log file name?

A user has created a queue named “awsmodule” with SQS. One of the consumers of queue is
down for 3 days and then becomes available. Will that component receive message from queue?

An organization has setup multiple IAM users. The organization wants that each IAM user
accesses the IAM console only within the organization and not from outside. How can it achieve

this?

An organization has created one IAM user and applied the below mentioned policy to the user.
What entitlements do the IAM users avail with this policy?
{

“Version”: “2012-10-17”,
“Statement”: [
{
“Effect”: “Allow”,
“Action”: “ec2:Describe*”,
“Resource”: “*”
},
{
“Effect”: “Allow”
“Action”: [
“cloudwatch:ListMetrics”,
“cloudwatch:GetMetricStatistics”,
“cloudwatch:Describe*”
],
“Resource”: “*”
},
{
“Effect”: “Allow”,
“Action”: “autoscaling:Describe*”,
“Resource”: “*”
} ] }