ARN (Amazon Resource Name) quiz · Level 0

Question 1In the ARN arn:aws:dynamodb:us-east-1:111122223333:table/Todos, what is 111122223333?

The AWS account ID that owns the table.Correct. An ARN reads: partition, service, Region, account ID, then the resource.The table's own ID.Not this one. The table is named at the end: table/Todos.The ID of the user who created the table.Not this one. ARNs never say who created something.The Availability Zone the table lives in.Not this one. ARNs name the Region (us-east-1), never an Availability Zone.

Learn it: ARN (Amazon Resource Name)

Question 2A policy should cover only the Todos table, in us-east-1, in account 111122223333. Which Resource is right?

arn:aws:dynamodb:us-east-1:111122223333:table/TodosCorrect. Service, Region, account ID, then table/ and its name.arn:aws:s3:::TodosNot this one. That is the ARN of an S3 bucket named Todos.TodosNot this one. Policies name resources by ARN, not by bare name.arn:aws:dynamodb:::TodosNot this one. DynamoDB ARNs include the Region and account, and the table/ prefix.

Learn it: ARN (Amazon Resource Name)

Question 3What is the ARN of an S3 bucket named todoio-pictures?

arn:aws:s3:::todoio-picturesCorrect. Bucket names are globally unique, so S3 bucket ARNs leave out the Region and the account ID.arn:aws:s3:eu-west-1:111122223333:todoio-picturesNot this one. Most ARNs have a Region and account; S3 bucket ARNs don't.s3://todoio-picturesNot this one. That is the address the CLI uses, not an ARN.arn:aws:s3:::bucket/todoio-picturesNot this one. There is no bucket/ prefix.

Learn it: ARN (Amazon Resource Name) · S3

Question 4What does "ARN (Amazon Resource Name)" mean?

The unique full name of an AWS resource.Correct. Think of it as: A full postal address, down to the flat number.A JSON document listing allowed (or denied) actions on resources.Not this one. That describes IAM policy.Short-lived AWS keys handed out for a role, which expire automatically.Not this one. That describes Temporary credentials.An identity with permissions that something can "wear" temporarily. No password.Not this one. That describes IAM role.

Learn it: ARN (Amazon Resource Name)

Question 5Which term is this? "The unique full name of an AWS resource."

ARN (Amazon Resource Name)Correct. Yes. Think of it as: A full postal address, down to the flat number.IAM policyNot this one. IAM policy is: A JSON document listing allowed (or denied) actions on resources.Temporary credentialsNot this one. Temporary credentials is: Short-lived AWS keys handed out for a role, which expire automatically.IAM roleNot this one. IAM role is: An identity with permissions that something can "wear" temporarily. No password.

Learn it: ARN (Amazon Resource Name)

Question 6Which AWS term is described by this analogy? "A full postal address, down to the flat number."

ARN (Amazon Resource Name)Correct. Yes: The unique full name of an AWS resource.IAM policyNot this one. IAM policy is: A JSON document listing allowed (or denied) actions on resources. Its analogy: The list of rooms printed on the back of a badge.Temporary credentialsNot this one. Temporary credentials is: Short-lived AWS keys handed out for a role, which expire automatically. Its analogy: A wristband that's only valid for today.IAM roleNot this one. IAM role is: An identity with permissions that something can "wear" temporarily. No password. Its analogy: A visitor badge that's handed out at the door and expires.

Learn it: ARN (Amazon Resource Name)

ARN (Amazon Resource Name)

Worth another look

Your weak spots

Services

Concepts