Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM)

A healthcare organization hires a new compliance officer who needs permanent, individual access to log into the AWS Management Console to review compliance reports. Which AWS Identity and Access Management (IAM) entity should be created to grant this access?

  1. A
    An IAM role
  2. B
    The AWS account root user
  3. An IAM userAnswer
  4. D
    An AWS Support ticket requesting AWS to configure local account access

Answer

An IAM user
An IAM user is the correct entity to create because it represents a specific person or service that requires permanent credentials to interact with AWS, such as logging into the AWS Management Console.

Step-by-Step Solution

1
Identify the access requirement, which is a new permanent employee (compliance officer) needing individual login credentials to the AWS Management Console.
The scenario requires permanent, individual credentials rather than temporary or shared access.
Understanding the nature of the worker's access requirement determines whether an IAM user or IAM role is appropriate.
2
Evaluate the AWS security best practices for daily operational access.
Individual IAM users should be created for daily tasks, and root user usage should be restricted.
Applying the principle of least privilege and administrative isolation secures the account.

Key Concept

AWS Identity and Access Management (IAM) Entities
Estimated Time:45s
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic