SAP-C02 · Question #279
A company is running several workloads in a single AWS account. A new company policy stales that engineers can provision only approved resources and that engineers must use AWS CloudFormation to…
The correct answer is C. Update the IAM policy for the engineers' IAM role with permissions to only allow AWS. https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/security-best- practices.html#use-iam-to-control-access https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-servicerole.html
Question
A company is running several workloads in a single AWS account. A new company policy stales that engineers can provision only approved resources and that engineers must use AWS CloudFormation to provision these resources. A solutions architect needs to create a solution to enforce the new restriction on the IAM role that the engineers use for access. What should the solutions architect do to create the solution?
Options
- AUpload AWS CloudFormation templates that contain approved resources to an Amazon S3
- BUpdate the IAM policy for the engineers" IAM role with permissions to only allow provisioning of
- CUpdate the IAM policy for the engineers' IAM role with permissions to only allow AWS
- DProvision resources in AWS CloudFormation stacks.
How the community answered
(30 responses)- A3% (1)
- B3% (1)
- C80% (24)
- D13% (4)
Explanation
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/security-best- practices.html#use-iam-to-control-access https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-servicerole.html
Community Discussion
No community discussion yet for this question.