Which resource and policy type are used to calculate AWS Net Effective Permissions? (Choose two.)

The correct answer is B. Lambda Function D. AWS Service Control Policies (SCPs). AWS Net Effective Permissions are calculated by evaluating the intersection of all applicable policies for a given resource or identity. Lambda Functions are a key resource type analyzed because they carry execution roles and resource-based policies that define what actions…

Cloud Infrastructure Entitlement Management (CIEM)

Question

Options

AService Linked Roles
BLambda Function
CAmazon Resource Names (ARNs) using Wild Cards
DAWS Service Control Policies (SCPs)

How the community answered

(24 responses)

A
8% (2)
B
88% (21)
C
4% (1)

Explanation

AWS Net Effective Permissions are calculated by evaluating the intersection of all applicable policies for a given resource or identity. Lambda Functions are a key resource type analyzed because they carry execution roles and resource-based policies that define what actions they can perform. AWS Service Control Policies (SCPs) are organizational-level guardrails that set the maximum allowable permissions for accounts within an AWS Organization. Together, SCPs constrain the ceiling of permissions while Lambda function roles define granted permissions, making both central to computing the net effective permission set. Service Linked Roles and wildcard ARNs are factors but not the primary resource/policy type pairing for this calculation.

Topics

#AWS Effective Permissions#Service Control Policies#Lambda Functions#CIEM

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice