SCS-C02 Question #408: Real Exam Question with Answer & Explanation

Question

A company's AWS account consists of approximately 300 IAM users. Now there is a mandate that an access change is required for 100 IAM users to have unlimited privileges to S3.As a system administrator, how can you implement this effectively so that there is no need to apply the policy at the individual user level?

Options

• ACreate a new role and add each user to the IAM role
• BUse the IAM groups and add users, based upon their role, to different groups and apply the policy
• CCreate a policy and apply it to multiple users using a JSON script
• DCreate an S3 bucket policy with unlimited access which includes each user's AWS account ID