SCS-C02 · Question #13
A company's security engineer has been tasked with restricting a contractor's IAM account access to the company's Amazon EC2 console without providing access to any other AWS services. The…
The correct answer is B. Create an IAM permissions boundary policy that allows Amazon EC2 access. Associate the. https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_bound
Question
A company's security engineer has been tasked with restricting a contractor's IAM account access to the company's Amazon EC2 console without providing access to any other AWS services. The contractor's IAM account must not be able to gain access to any other AWS service, even if the IAM account is assigned additional permissions based on IAM group membership. What should the security engineer do to meet these requirements?
Options
- ACreate an inline IAM user policy that allows for Amazon EC2 access for the contractor's IAM user.
- BCreate an IAM permissions boundary policy that allows Amazon EC2 access. Associate the
- CCreate an IAM group with an attached policy that allows for Amazon EC2 access. Associate the
- DCreate a IAM role that allows for EC2 and explicitly denies all other services. Instruct the
How the community answered
(56 responses)- A2% (1)
- B84% (47)
- C5% (3)
- D9% (5)
Explanation
https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_bound
Topics
Community Discussion
No community discussion yet for this question.