SOA-C02 · Question #488
A company is managing multiple AWS accounts in AWS Organizations. The company is reviewing internal security of its AWS environment. The company's security administrator has their own AWS account and
The correct answer is D. Create an IAM policy in each developer account that has read-only access related to VPC. When you set permissions with IAM policies, grant only the permissions required to perform a task. You do this by defining the actions that can be taken on specific resources under specific conditions, also known as least-privilege permissions. https://docs.aws.amazon.com/IAM/lat
Question
A company is managing multiple AWS accounts in AWS Organizations. The company is reviewing internal security of its AWS environment. The company's security administrator has their own AWS account and wants to review the VPC configuration of developer AWS accounts. Which solution will meet these requirements in the MOST secure manner?
Options
- ACreate an IAM policy in each developer account that has read-only access related to VPC
- BCreate an IAM policy in each developer account that has administrator access to all Amazon EC2
- CCreate an IAM policy in each developer account that has administrator access related to VPC
- DCreate an IAM policy in each developer account that has read-only access related to VPC
How the community answered
(21 responses)- A5% (1)
- B5% (1)
- C10% (2)
- D81% (17)
Explanation
When you set permissions with IAM policies, grant only the permissions required to perform a task. You do this by defining the actions that can be taken on specific resources under specific conditions, also known as least-privilege permissions. https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html
Topics
Community Discussion
No community discussion yet for this question.