SAA-C03 · Question #336
A company is setting up a development environment on AWS for a team of developers. The team needs to access multiple Amazon S3 buckets to store project data. The team also needs to use Amazon EC2 to…
The correct answer is B. Create IAM roles that have fine-grained permissions for Amazon S3 and Amazon EC2. Configure. The most secure and manageable way to provide developers with temporary, least-privilege access is by using AWS IAM Identity Center (formerly AWS SSO). IAM Identity Center allows assigning IAM roles with scoped permissions based on the developer's team role. This ensures no…
Question
A company is setting up a development environment on AWS for a team of developers. The team needs to access multiple Amazon S3 buckets to store project data. The team also needs to use Amazon EC2 to run development instances. The company needs to ensure that the developers have access only to specific Amazon S3 buckets and EC2 instances. Access permissions must be assigned according to each developer's role on the team. The company wants to minimize the use of permanent credentials and to ensure access is securely managed according to the principle of least privilege. Which solution will meet these requirements?
Options
- ACreate IAM roles that have administrative-level permissions for Amazon S3 and Amazon EC2.
- BCreate IAM roles that have fine-grained permissions for Amazon S3 and Amazon EC2. Configure
- CCreate IAM users that have programmatic access to Amazon S3 and Amazon EC2. Generate
- DCreate a VPC endpoint for Amazon S3. Require developers to access Amazon EC2 instances
How the community answered
(51 responses)- A10% (5)
- B82% (42)
- C4% (2)
- D4% (2)
Explanation
The most secure and manageable way to provide developers with temporary, least-privilege access is by using AWS IAM Identity Center (formerly AWS SSO). IAM Identity Center allows assigning IAM roles with scoped permissions based on the developer's team role. This ensures no permanent credentials are required and minimizes risk. Option B enables role-based access with centralized identity and access management, making it the most secure and scalable solution for managing developer permissions.
Community Discussion
No community discussion yet for this question.