SOA-C02 · Question #597
A company wants to enhance its security by applying IAM permissions boundaries. The company tries to use IAM policy conditions and receives the following error: "Error: error updating IAM Role (role-n
Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #597. The question stem and answer options stay visible for context.
Question
A company wants to enhance its security by applying IAM permissions boundaries. The company tries to use IAM policy conditions and receives the following error:
"Error: error updating IAM Role (role-name) assume role policy:
AccessDenied: User: id-arn is not authorized to perform:
iam:UpdateAssumeRolePolicy on resource: role role-namestatus code:
403, request id: request-id" The policy that contains the condition includes the following snippet:
What is the reason for the error?
Exhibit
Options
- AThe UpdateAssumeRolePolicy action is not compatible with the iam:PermissionsBoundary
- BCondition keys are not allowed in conjunction with permissions boundaries.
- CPermissions boundaries are not allowed with IAM policies.
- DIAM user id-arn is not allowed to assume role-name.
Unlock SOA-C02 to see the answer
You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.