CV0-003 · Question #237
A cloud administrator is provisioning several user accounts that have administrator rights to assets using JSON within an IaaS cloud platform. The administrator is required to configure "alternate"…
The correct answer is A. Statement. The Statement element in an IAM JSON policy is the container array that holds one or more individual permission blocks, enabling administrators to define multiple alternate permission configurations within a single policy.
Question
A cloud administrator is provisioning several user accounts that have administrator rights to assets using JSON within an IaaS cloud platform. The administrator is required to configure "alternate" settings using the API. Given this scenario, which of the following elements would allow the administrator to meet these requirements in the JSON file?
Options
- AStatement
- BEffect
- CResource
- DCondition
How the community answered
(60 responses)- A73% (44)
- B7% (4)
- C3% (2)
- D17% (10)
Why each option
The Statement element in an IAM JSON policy is the container array that holds one or more individual permission blocks, enabling administrators to define multiple alternate permission configurations within a single policy.
The Statement element is the top-level array in an IAM JSON policy document that allows multiple distinct permission blocks to be defined, each with its own Effect, Action, Resource, and Condition. This structure is what enables 'alternate' settings - different permission rules can coexist in the same policy by adding additional Statement entries via the API.
Effect is a required field within each statement that specifies only 'Allow' or 'Deny' - it is a value property, not a container for alternate configurations.
Resource specifies the ARN or identifier of the cloud asset the statement applies to - it defines scope, not alternate policy configurations.
Condition adds conditional logic to a single statement (e.g., based on time or IP) but does not serve as the structural element for defining alternate permission blocks.
Concept tested: IAM JSON policy document Statement element structure
Source: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html
Topics
Community Discussion
No community discussion yet for this question.