Tips and tricks AWS Solutions Architect Associate #9

User Pool: Provides built-in user management and authentication extensions.

Identity Pool: Issues credentials and ephemeral identities for accessing AWS services.

User Groups: Belonging to a group is optional.

IAM Policy: Defined by version, ID, statement (with ID, effect, principal, action, resource).

Certificate: Managed via AWS Certificate Manager.

Cognito: Supports federated users (e.g., social or enterprise identity providers).

Permission Boundary: Restricts the maximum permissions for a user or role.

Organization Migration: Involves deleting an organization, sending invitations, and accepting them.

SCP (Service Control Policy): Defines policy boundaries at the organization level.

• Hierarchy: SCP > IAM > Local permissions.

Parameter Store: Manages parameters with version tracking.

MFA: Strongly recommended for the root account.