ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 713 - SAP-C01 discussion

Report
Export

An organization (account ID 123412341234) has configured the IAM policy to allow the user to modify his credentials. What will the below mentioned statement allow the user to perform?

A.
Allow the IAM user to update the membership of the group called TestingGroup
Answers
A.
Allow the IAM user to update the membership of the group called TestingGroup
B.
The IAM policy will throw an error due to an invalid resource name
Answers
B.
The IAM policy will throw an error due to an invalid resource name
C.
The IAM policy will allow the user to subscribe to any IAM group
Answers
C.
The IAM policy will allow the user to subscribe to any IAM group
D.
Allow the IAM user to delete the TestingGroup
Answers
D.
Allow the IAM user to delete the TestingGroup
Suggested answer: A

Explanation:

AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. If the organization (account ID 123412341234) wants their users to manage their subscription to the groups, they should create a relevant policy for that. The below mentioned policy allows the respective IAM user to update the membership of the group called MarketingGroup. {

"Version": "2012-10-17",

"Statement": [{

"Effect": "Allow", "Action": [ "iam:AddUserToGroup",

"iam:RemoveUserFromGroup", "iam:GetGroup"

],

"Resource": "arn:aws:iam:: 123412341234:group/ TestingGroup " }]

Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/Credentials-Permissions-examples.html#creds-policies-credentials

asked 16/09/2024
Manoj Balan
44 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first