ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 194 - DOP-C02 discussion

Report
Export

A company is reviewing its IAM policies. One policy written by the DevOps engineer has been (lagged as too permissive. The policy is used by an AWS Lambda function that issues a stop command to Amazon EC2 instances tagged with Environment: NonProduccion over the weekend. The current policy is:

What changes should the engineer make to achieve a policy ot least permission? (Select THREE.)

A.
Answers
A.
B.
Answers
B.
C.
Answers
C.
D.
Answers
D.
E.
Answers
E.
F.
Answers
F.
Suggested answer: A, B, D

Explanation:

The engineer should make the following changes to achieve a policy of least permission:

A:Add a condition to ensure that the principal making the request is an AWS Lambda function. This ensures that only Lambda functions can execute this policy.

B:Narrow down the resources by specifying the ARN of EC2 instances instead of allowing all resources. This ensures that the policy only affects EC2 instances.

D:Add a condition to ensure that this policy only applies to EC2 instances tagged with ''Environment: NonProduction''. This ensures that production environments are not affected by this policy.

AWS Identity and Access Management (IAM) - AWS Documentation

Certified DevOps Engineer - Professional (DOP-C02) Study Guide(page 179)

asked 16/09/2024
Tillmon, Quinton
37 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first