DOP-C02 · Question #274
DOP-C02 Question #274: Real Exam Question with Answer & Explanation
Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #274. The question stem and answer options stay visible for context.
Question
A company's development team uses AWS CloudFormation to deploy its application resources. The team must use CloudFormation for all changes to the environment. The team cannot use the AWS Management Console or the AWS CLI to make manual changes directly. The team uses a developer IAM role to access the environment. The role is configured with the AdministratorAccess managed IAM policy. The company has created a new CloudFormationDeployment IAM role that has the following policy attached: The company wants to ensure that only CloudFormation can use the new role. The development team cannot make any manual changes to the deployed resources. Which combination of steps will meet these requirements? (Choose three.)
Options
- ARemove the AdministratorAccess policy. Assign the ReadOnlyAccess managed IAM policy to the
- BUpdate the trust policy of the CloudFormationDeployment role to allow the developer IAM role to
- CConfigure the developer IAM role to be able to get and pass the CloudFormationDeployment role
- DUpdate the trust policy of the CloudFormationDeployment role to allow the
- ERemove the AdministratorAccess policy. Assign the ReadOnlyAccess managed IAM policy to the
- FAdd an IAM policy to the CloudFormationDeployment role to allow cloudformation:* on all
Unlock DOP-C02 to see the answer
You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.