Which of the following are best practices in AWS Identity and Access Management (IAM)? (Choose two.)

The correct answer is B. Use roles to delegate permissions. E. Use groups to assign permissions to IAM users.. Use roles to delegate permissions: Using IAM roles allows you to grant temporary permissions to resources without sharing long-term credentials. This is a secure practice for cross-account access or for AWS services needing permissions. Use groups to assign permissions to IAM use

Submitted by tyler.j· Mar 6, 2026Security and Compliance

Question

Options

ACreate shared access keys.
BUse roles to delegate permissions.
CDisable multi-factor authentication (MFA).
DAvoid the use of policy conditions.
EUse groups to assign permissions to IAM users.

How the community answered

(53 responses)

A
2% (1)
B
89% (47)
C
6% (3)
D
4% (2)

Explanation

Use roles to delegate permissions: Using IAM roles allows you to grant temporary permissions to resources without sharing long-term credentials. This is a secure practice for cross-account access or for AWS services needing permissions. Use groups to assign permissions to IAM users: By using groups, you can manage permissions for multiple users collectively, simplifying administration and ensuring consistency in access

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice