CV0-002 · Question #237
A cloud administrator is provisioning several user accounts that have administrator rights to assets using JSON within an IaaS cloud platform. The administrator is required to configure "alternate"…
The correct answer is A. Statement. The 'Statement' element in an IAM policy JSON file encapsulates a single set of permissions, which can include effects, resources, and conditions.
Question
A cloud administrator is provisioning several user accounts that have administrator rights to assets using JSON within an IaaS cloud platform. The administrator is required to configure "alternate" settings using the API. Given this scenario, which of the following elements would allow the administrator to meet these requirements in the JSON file?
Options
- AStatement
- BEffect
- CResource
- DCondition
How the community answered
(43 responses)- A81% (35)
- B12% (5)
- C5% (2)
- D2% (1)
Why each option
The 'Statement' element in an IAM policy JSON file encapsulates a single set of permissions, which can include effects, resources, and conditions.
The `Statement` element is the top-level container for a single permission entry within an IAM policy, grouping together all the elements (like `Effect`, `Resource`, `Action`, `Principal`, `Condition`) that define a specific permission set.
`Effect` specifies whether the statement allows or denies access, not a container for alternate settings.
`Resource` specifies the object or objects to which the statement applies, not a container for alternate settings.
`Condition` specifies conditions under which a policy statement grants or denies permission, not a container for alternate settings.
Concept tested: IAM policy structure and elements
Source: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html
Topics
Community Discussion
No community discussion yet for this question.