A security engineer is designing an IAM policy to protect AWS API operations. The policy must enforce multi-factor authentication (MFA) for IAM users to access certain services in the AWS production account. Each session must remain valid for only 2 hours. The current version of the IAM policy is as follows:

Which combination of conditions must the security engineer add to the IAM policy to meet these requirements? (Choose two.)

Question

A security engineer is designing an IAM policy to protect AWS API operations. The policy must enforce multi-factor authentication (MFA) for IAM users to access certain services in the AWS production account. Each session must remain valid for only 2 hours. The current version of the IAM policy is as follows:

Which combination of conditions must the security engineer add to the IAM policy to meet these requirements? (Choose two.)

Accepted Answer

A. "Bool": {"aws:MultiFactorAuthPresent": "true"} C. "NumericLessThan": {"aws:MultiFactorAuthAge": "7200"}

Answer

B. "Bool": {"aws:MultiFactorAuthPresent": "false"}

Answer

D. "NumericGreaterThan": {"aws:MultiFactorAuthAge": "7200"}

Answer

E. "NumericLessThan": {"MaxSessionDuration": "7200"}

A security engineer is designing an IAM policy to protect AWS API operations. The policy must enforce multi-factor authentication (MFA) for IAM users to access certain services in the AWS production…

Question

Exhibit

Options

How the community answered

Explanation

Topics

Community Discussion