SAA-C03 · Question #710
An employee accesses the AWS Management Console through an IAM user. The employee takes a new job role within the company. The new job role requires only programmatic access to AWS. The company must…
The correct answer is A. Remove the password for the IAM user. Keep active access keys. Removing the IAM user’s password disables AWS Management Console access while leaving the access keys intact for programmatic access. This directly meets the requirement with minimal change and the least operational effort, without affecting existing automation or credentials…
Question
An employee accesses the AWS Management Console through an IAM user. The employee takes a new job role within the company. The new job role requires only programmatic access to AWS. The company must disable the employee’s direct access to the Console. Which solution will meet this requirement with the LEAST operational overhead?
Options
- ARemove the password for the IAM user. Keep active access keys.
- BExpire the active access keys. Remove the password for the IAM user.
- CRemove the existing policies that are attached to the IAM user.
- DDelete the existing IAM user. Create a new IAM user for the new job role and set a new
How the community answered
(22 responses)- A86% (19)
- B5% (1)
- C9% (2)
Explanation
Removing the IAM user’s password disables AWS Management Console access while leaving the access keys intact for programmatic access. This directly meets the requirement with minimal change and the least operational effort, without affecting existing automation or credentials that rely on access keys.
Community Discussion
No community discussion yet for this question.