SAA-C03 · Question #415
A company runs all its business applications in the AWS Cloud. The company uses AWS Organizations to manage multiple AWS accounts. A solutions architect needs to review all permissions granted to…
The correct answer is C. Use AWS Identity and Access Management (IAM) Access Analyzer to review all the company's. IAM Access Analyzer analyzes permissions granted using policies to determine what resources are shared with an external entity, and helps identify excessive permissions or least privilege violations across all accounts in an AWS Organization. It is specifically designed for…
Question
A company runs all its business applications in the AWS Cloud. The company uses AWS Organizations to manage multiple AWS accounts. A solutions architect needs to review all permissions granted to IAM users to determine which users have more permissions than required. Which solution will meet these requirements with the LEAST administrative overhead?
Options
- AUse Network Access Analyzer to review all access permissions in the company's AWS accounts.
- BCreate an AWS CloudWatch alarm that activates when an IAM user creates or modifies
- CUse AWS Identity and Access Management (IAM) Access Analyzer to review all the company's
- DUse Amazon Inspector to find vulnerabilities in existing IAM policies.
How the community answered
(16 responses)- A6% (1)
- B13% (2)
- C75% (12)
- D6% (1)
Explanation
IAM Access Analyzer analyzes permissions granted using policies to determine what resources are shared with an external entity, and helps identify excessive permissions or least privilege violations across all accounts in an AWS Organization. It is specifically designed for reviewing and refining IAM permissions with minimal administrative effort.
Community Discussion
No community discussion yet for this question.