Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM)

A cloud administrator needs to grant the same read-only permissions to ten new security analysts. Which AWS Identity and Access Management (IAM) feature should the administrator use to manage and apply these permissions to all ten analysts at once?

  1. IAM User GroupsAnswer
  2. B
    IAM Roles
  3. C
    AWS Account Root User credentials
  4. D
    AWS Shared Responsibility policies

Answer

IAM User Groups
IAM User Groups allow administrators to specify permissions for a collection of users. This makes it easy to manage permissions for multiple users at once, ensuring consistency and adhering to AWS best practices.

Step-by-Step Solution

1
Identify the goal: granting the same set of permissions to a collective set of individual IAM users (ten security analysts).
Determine that individual policy attachments are inefficient and error-prone.
Grouping users simplifies administrative overhead.
2
Evaluate the available IAM features for managing permissions for multiple users collectively.
Identify that IAM User Groups are designed specifically to attach permission policies to multiple users simultaneously.
IAM User Groups promote the best practice of managing permissions at the group level rather than the user level.

Key Concept

IAM User Groups are collections of IAM users that allow administrators to specify and manage permissions for multiple users easily.
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic