SCS-C02 · Question #335
An organization has launched 5 instances: 2 for production and 3 for testing. The organization wants that one particular group of IAM users should only access the test instances and not the…
The correct answer is D. Define the tags on the test and production servers and add a condition to the IAM policy which. Tags enable you to categorize your AWS resources in different ways, for example, by purpose, owner, or environment. This is useful when you have many resources of the same type -- you can quickly identify a specific resource based on the tags you've assigned to it Option A is…
Question
An organization has launched 5 instances: 2 for production and 3 for testing. The organization wants that one particular group of IAM users should only access the test instances and not the production ones. How can the organization set that as a part of the policy?
Options
- ALaunch the test and production instances in separate regions and allow region wise access to the
- BDefine the IAM policy which allows access based on the instance ID
- CCreate an IAM policy with a condition which allows access to only small instances
- DDefine the tags on the test and production servers and add a condition to the IAM policy which
How the community answered
(31 responses)- A16% (5)
- B3% (1)
- C6% (2)
- D74% (23)
Explanation
Tags enable you to categorize your AWS resources in different ways, for example, by purpose, owner, or environment. This is useful when you have many resources of the same type -- you can quickly identify a specific resource based on the tags you've assigned to it Option A is invalid because this is not a recommended practices Option B is invalid because this is an overhead to maintain this in policies Option C is invalid because the instance type will not resolve the requirement
Topics
Community Discussion
No community discussion yet for this question.