nerdexam
Amazon

DOP-C02 · Question #25

A development team wants to use AWS CloudFormation stacks to deploy an application. However, the developer IAM role does not have the required permissions to provision the resources that are…

The correct answer is D. Create an AWS CloudFormation service role that has the required permissions. Grant the. https://docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/using-iam- servicerole.html

Submitted by skyler.x· Mar 6, 2026Security & Compliance

Question

A development team wants to use AWS CloudFormation stacks to deploy an application. However, the developer IAM role does not have the required permissions to provision the resources that are specified in the AWS CloudFormation template. A DevOps engineer needs to implement a solution that allows the developers to deploy the stacks. The solution must follow the principle of least privilege. Which solution will meet these requirements?

Options

  • ACreate an IAM policy that allows the developers to provision the required resources. Attach the
  • BCreate an IAM policy that allows full access to AWS CloudFormation. Attach the policy to the
  • CCreate an AWS CloudFormation service role that has the required permissions. Grant the
  • DCreate an AWS CloudFormation service role that has the required permissions. Grant the

How the community answered

(37 responses)
  • A
    5% (2)
  • B
    11% (4)
  • C
    3% (1)
  • D
    81% (30)

Explanation

https://docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/using-iam- servicerole.html

Topics

#CloudFormation#IAM Service Roles#Least Privilege#Permissions Management

Community Discussion

No community discussion yet for this question.

Full DOP-C02 Practice