ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 447 - SAA-C03 discussion

Report
Export

A company is expecting rapid growth in the near future. A solutions architect needs to configure existing users and grant permissions to new users on AWS. The solutions architect has decided to create IAM groups. The solutions architect will add the new users to IAM groups based on department.

Which additional action is the MOST secure way to grant permissions to the new users?

A.
Apply service control policies (SCPs) to manage access permissions.
Answers
A.
Apply service control policies (SCPs) to manage access permissions.
B.
Create IAM roles that have least privilege permission. Attach the roles to the IAM groups.
Answers
B.
Create IAM roles that have least privilege permission. Attach the roles to the IAM groups.
C.
Create an IAM policy that grants least privilege permission. Attach the policy to the IAM groups.
Answers
C.
Create an IAM policy that grants least privilege permission. Attach the policy to the IAM groups.
D.
Create IAM roles. Associate the roles with a permissions boundary that defines the maximum permissions.
Answers
D.
Create IAM roles. Associate the roles with a permissions boundary that defines the maximum permissions.
Suggested answer: C

Explanation:

An IAM policy is a document that defines the permissions for an IAM identity (such as a user, group, or role). You can use IAM policies to grant permissions to existing users and groups based on department. You can create an IAM policy that grants least privilege permission, which means that you only grant the minimum permissions required for the users to perform their tasks. You can then attach the policy to the IAM groups, which will apply the policy to all the users in those groups. This solution will reduce operational costs and simplify configuration and management of permissions.

Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html

asked 16/09/2024
Pamela Joanne Ang
31 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first