Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM)

An administrator needs to assign similar security permissions to ten new developers in an organization. Which of the following are AWS-recommended practices for managing these permissions? (Select TWO.)

  1. Create individual IAM users for each developer to ensure activity can be audited.Answer
  2. Place the individual IAM users into an IAM group and attach the required permission policies to the group.Answer
  3. C
    Share the AWS account root user credentials with the developers to simplify login management.
  4. D
    Use IAM roles to provide permanent credentials for the developers' daily console access.
  5. E
    Rely on AWS to automatically configure and manage individual user permissions as part of their security responsibilities.

Answer

To follow AWS best practices, individual IAM users should be created for each developer, and these users should be placed in an IAM group with the necessary permission policies attached to the group.
Creating individual IAM users ensures that each developer has unique credentials, making it possible to audit actions and trace them to a specific person. Placing these users in an IAM group and attaching policies to that group is the AWS-recommended best practice to manage permissions efficiently and consistently.

Step-by-Step Solution

1
Analyze credential accountability requirements
Determine that sharing a single account (like the root user or a shared user) is insecure, meaning individual IAM users must be created for auditing purposes.
Individual IAM users ensure that all actions can be traced to a specific person.
2
Determine the most efficient method for managing group permissions
Determine that placing these individual IAM users in an IAM group and attaching policies to the group simplifies administrative overhead.
Instead of attaching policies to ten separate users, attaching them to a single group ensures consistent permissions and easy updates.

Key Concept

IAM Identity Management Best Practices (Users and Groups)
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic