nerdexam
Palo_Alto_Networks

PSE-PRISMACLOUD · Question #9

What is the scope of the Amazon Web Services 1AM Service?

The correct answer is A. global. AWS IAM (Identity and Access Management) operates at the global scope, meaning IAM users, groups, roles, and policies are shared across all AWS regions under a single account - creating an IAM user in us-east-1 makes that user available in eu-west-1 without any additional…

Cloud Identity and Access Management

Question

What is the scope of the Amazon Web Services 1AM Service?

Options

  • Aglobal
  • Bregional
  • CVPC
  • Dzonal

How the community answered

(50 responses)
  • A
    92% (46)
  • B
    2% (1)
  • C
    2% (1)
  • D
    4% (2)

Explanation

AWS IAM (Identity and Access Management) operates at the global scope, meaning IAM users, groups, roles, and policies are shared across all AWS regions under a single account - creating an IAM user in us-east-1 makes that user available in eu-west-1 without any additional configuration.

Why the distractors are wrong:

  • B (Regional): Services like EC2, S3 buckets, and RDS are regional, but IAM is not - your identity plane doesn't change per region.
  • C (VPC): VPCs are network-level constructs for isolating resources; IAM operates above the network layer entirely.
  • D (Zonal): Availability Zone scope applies to things like EC2 instances and EBS volumes, not identity/access management.

Memory tip: Think of IAM as your company's HR department - HR policies apply to everyone in the company regardless of which office (region) they work in. IAM = "I AM the same everywhere."

Topics

#AWS IAM#global service#scope#identity management

Community Discussion

No community discussion yet for this question.

Full PSE-PRISMACLOUD Practice