[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cheat-sheet---en":3,"domain-info---en":3,"topic-info----en":3,"lesson-aws-certified-cloud-practitioner-security-and-compliance-identity-and-access-management-authentication-and-mfa-en":4,"prev-aws-certified-cloud-practitioner-security-and-compliance-identity-and-access-management-authentication-and-mfa-en":18,"next-aws-certified-cloud-practitioner-security-and-compliance-identity-and-access-management-authentication-and-mfa-en":28},null,{"locked":5,"reason":6,"meta":7,"item":3},true,"paywall",{"title":8,"description":9,"isFree":10,"estimatedMinutes":11,"difficulty":12,"learningObjectives":13},"Authentication and Multi-Factor Authentication","Learn the ways an identity proves itself to AWS, from passwords and access keys to temporary credentials, and how multi-factor authentication adds a second layer of protection.",false,15,"beginner",[14,15,16,17],"Describe the ways a principal can authenticate with AWS","Explain what an access key is and when to avoid long-term keys","Define multi-factor authentication and explain how it strengthens sign-in","Compare the MFA device types AWS supports",{"locked":5,"reason":6,"meta":19,"item":3},{"title":20,"description":21,"isFree":10,"estimatedMinutes":22,"difficulty":12,"learningObjectives":23},"The Root User and Least Privilege","Understand the AWS account root user, the few tasks that only it can do, how to lock it down, and the principle of least privilege that should guide every permission you grant.",14,[24,25,26,27],"Explain what the AWS account root user is and the access it holds","Identify tasks that require root user credentials","Apply the best practices for securing the root user","Define the principle of least privilege and explain how to apply it",{"locked":5,"reason":6,"meta":29,"item":3},{"title":30,"description":31,"isFree":10,"estimatedMinutes":11,"difficulty":12,"learningObjectives":32},"IAM Identity Center and Federation","See how AWS gives your workforce single sign-on across many accounts with IAM Identity Center, and how federation lets people use an existing identity provider to access AWS with temporary credentials.",[33,34,35,36],"Explain why IAM users do not scale well for human access across many accounts","Describe what AWS IAM Identity Center is and the access it provides","Identify the identity sources IAM Identity Center can use","Explain what identity federation is and how it grants temporary access"]