A CloudOps engineer wants to provide access to AWS services by attaching an IAM policy to multiple IAM users The CloudOps engineer also wants to be able to change the policy and create new versions…

The correct answer is B. Add the users to an IAM user group. Attach the policy to the group. D. Create a customer managed policy. Attaching a policy to a group allows centralized management of permissions for multiple users. All users in the group automatically inherit the policy permissions. A customer managed policy is reusable, versioned, and editable. You can create new versions of the policy and…

Submitted by anna_se· Mar 5, 2026Security and compliance

Question

A CloudOps engineer wants to provide access to AWS services by attaching an IAM policy to multiple IAM users The CloudOps engineer also wants to be able to change the policy and create new versions. Which combination of actions will meet these requirements? (Choose two.)

Options

AAdd the users to an IAM service-linked role. Attach the policy to the role.
BAdd the users to an IAM user group. Attach the policy to the group.
CCreate an AWS managed policy.
DCreate a customer managed policy.
ECreate an inline policy.

How the community answered

(30 responses)

A
3% (1)
B
80% (24)
C
10% (3)
E
7% (2)

Explanation

Attaching a policy to a group allows centralized management of permissions for multiple users. All users in the group automatically inherit the policy permissions. A customer managed policy is reusable, versioned, and editable. You can create new versions of the policy and update or roll back as needed. Combining this with a user group provides flexible, scalable, and maintainable permission management.

Topics

#IAM user groups#customer managed policy#policy versioning#IAM best practices

Community Discussion

No community discussion yet for this question.

Full SOA-C03 Practice