What access control feature is essential for a financial services company using an ECS cluster to secure client data?

Question

Options

• AUnencrypted data transmission protocols
• BPublic access to all data objects
• CFine-grained IAM policies
• DSingle, shared user account for all employees

• A
  4% (2)
• B
  2% (1)
• C
  93% (50)
• D
  2% (1)

Explanation

Fine-grained IAM policies (C) are essential because they enforce the principle of least privilege - each ECS task, service, or employee gets only the specific permissions needed to access client data, minimizing the blast radius of any breach or misconfiguration. Option A is wrong because unencrypted transmission exposes sensitive financial data to interception (the opposite of security). Option B is wrong because public access to data objects would make client data visible to anyone on the internet, violating every financial regulation imaginable. Option D is wrong because a single shared account eliminates auditability, makes credential rotation impossible, and means a single compromised password exposes everything.

Memory tip: Think "IAM = I Access Minimally" - in financial services, regulators like SOC 2 and PCI-DSS demand you prove who accessed what and when, which only fine-grained per-identity policies can provide.

No community discussion yet for this question.