nerdexam
Amazon

CLF-C02 · Question #94

A company wants to provide one of its employees with access to Amazon RDS. The company also wants to limit the interaction to only the AWS CLI and AWS software development kits (SDKs). Which…

The correct answer is B. Create an IAM user and provide programmatic access only. E. Create an IAM policy with Amazon RDS access and attach it to the IAM user. https://aws.amazon.com/blogs/security/techniques-for-writing-least-privilege-iam-policies/

Submitted by tyler.j· Mar 6, 2026Security and Compliance

Question

A company wants to provide one of its employees with access to Amazon RDS. The company also wants to limit the interaction to only the AWS CLI and AWS software development kits (SDKs). Which combination of actions should the company take to meet these requirements while following the principles of least privilege? (Choose two.)

Options

  • ACreate an IAM user and provide AWS Management Console access only.
  • BCreate an IAM user and provide programmatic access only.
  • CCreate an IAM role and provide AWS Management Console access only.
  • DCreate an IAM policy with administrator access and attach it to the IAM user.
  • ECreate an IAM policy with Amazon RDS access and attach it to the IAM user.

How the community answered

(50 responses)
  • A
    6% (3)
  • B
    82% (41)
  • C
    2% (1)
  • D
    10% (5)

Explanation

https://aws.amazon.com/blogs/security/techniques-for-writing-least-privilege-iam-policies/

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice