Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM)

A startup has five developers who all need the same administrative permissions to manage Amazon EC2 resources. According to AWS security best practices, which of the following is the most efficient way to manage these permissions?

  1. Create an IAM group, attach the required IAM policy to the group, and add the developer users to the group.Answer
  2. B
    Create an IAM role for each developer and have them share a single IAM user account to access the role.
  3. C
    Provide the developers with the login credentials of the AWS account root user to simplify administration.
  4. D
    Submit a ticket to AWS Support asking them to configure and maintain the permissions for each developer.

Answer

Creating an IAM group, attaching the required policy to the group, and adding the users to the group is the recommended method to manage collective permissions.
Creating an IAM group and attaching the required policy to it is the AWS-recommended best practice for managing permissions for multiple users with the same job function. This centralized approach simplifies permission updates and ensures that new developers can quickly inherit the required permissions by simply being added to the group.

Step-by-Step Solution

1
Analyze the scenario requirements.
Five developers require identical administrative permissions to manage Amazon EC2 resources.
To apply AWS security best practices efficiently, we need a method that scales and maintains individual user accountability.
2
Evaluate IAM features for collective permission management.
Using an IAM group allows policies to be attached once and applied to all member users.
This is the standard, secure, and low-maintenance approach recommended by AWS.

Key Concept

AWS IAM Groups and Permission Management
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic