Which of the following statements are correct about the relationship between accounts and IAM users? (Multiple choice)

Question

Options

• AThe account can modify the resource usage permissions of IAM users at any time
• BIAM users do not need to pay any fees for resources, all fees are charged to the account
• CThe account can revoke the resource usage permissions of IAM users at any time
• DThe account can manage the budget of each IAM user. Once the budget of an IAM user is used

• A
  100% (35)

Explanation

All four options are correct because they accurately describe the hierarchical control relationship between a cloud account and its IAM users. The account (root or master account) holds administrative authority over all IAM users it creates, meaning it can grant, modify, or revoke permissions at any time (options A and C) - this control is continuous and unconditional. All resource costs incurred by IAM users are billed directly to the parent account, not to the IAM users themselves, since IAM users have no independent billing identity (option B). Option D is correct because accounts can set spending budgets per IAM user, and once that budget ceiling is reached, the user's ability to consume further resources is suspended until the account intervenes.

Since every option is correct in this question, there are no distractors to eliminate - the challenge is recognizing that none of the statements contain a subtle exception or limitation that would make them false.

Memory tip: Think of IAM users as employees and the account as the employer. The employer controls what employees can do (permissions), pays all the bills (billing centralization), can fire or limit employees at will (revocation), and can set expense limits per employee (budgets). The employee never holds independent financial responsibility.

No community discussion yet for this question.