ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 388 - SCS-C01 discussion

Report
Export

An organization has setup multiple IAM users. The organization wants that each IAM user accesses the IAM console only within the organization and not from outside. How can it achieve this? Please select:

A.
Create an IAM policy with the security group and use that security group for AWS console login
Answers
A.
Create an IAM policy with the security group and use that security group for AWS console login
B.
Create an IAM policy with a condition which denies access when the IP address range is not from the organization
Answers
B.
Create an IAM policy with a condition which denies access when the IP address range is not from the organization
C.
Configure the EC2 instance security group which allows traffic only from the organization's IP range
Answers
C.
Configure the EC2 instance security group which allows traffic only from the organization's IP range
D.
Create an IAM policy with VPC and allow a secure gateway between the organization and AWS Console
Answers
D.
Create an IAM policy with VPC and allow a secure gateway between the organization and AWS Console
Suggested answer: B

Explanation:

You can actually use a Deny condition which will not allow the person to log in from outside. The below example shows the Deny condition to ensure that any address specified in the source address is not allowed to access the resources in aws.

Option A is invalid because you don't mention the security group in the IAM policy

Option C is invalid because security groups by default don't allow traffic

Option D is invalid because the IAM policy does not have such an option For more information on IAM policy conditions, please visit the URL: http://docs.aws.amazon.com/IAM/latest/UserGuide/access pol examples.htm l#iam-policy- example-ec2-two-condition! The correct answer is: Create an IAM policy with a condition which denies access when the IP address range is not from the organization Submit your Feedback/Queries to our Experts

asked 16/09/2024
Joe Mon
27 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first