Examkin

Question

Difficulty: MediumIdentity and Access Management (IAM)

An enterprise wants to simplify permission management for its finance department. Currently, the IT team manually attaches permissions to each new financial analyst's AWS account, which has led to inconsistent access rights and administrative overhead. Which of the following is the AWS-recommended method to resolve this issue?

  1. A
    Create a shared IAM role with the necessary permissions and distribute the role's credentials to the financial analysts for daily login.
  2. Create an IAM group for the finance department, attach the necessary permissions policy to the group, and add the financial analysts to this group.Answer
  3. C
    Use the AWS account root user to perform daily administrative tasks for the finance department and share the credentials.
  4. D
    Delegate individual analyst permission management to AWS under the AWS Shared Responsibility Model.

Answer

Create an IAM group for the finance department, attach the necessary permissions policy to the group, and add the financial analysts to this group.
Creating an IAM group and attaching the required policy to it allows the administrator to manage permissions for all group members at once. New users automatically inherit the group's permissions when added, eliminating administrative overhead and ensuring consistency.

Step-by-Step Solution

1
Analyze the administrative challenge of managing permissions individually for multiple users with identical job functions.
Identify that individual assignment is prone to errors, leads to inconsistent access rights, and increases administrative overhead.
Permissions should be managed centrally and consistently for users sharing the same functional role.
2
Evaluate the AWS IAM constructs that allow collective permission management.
Determine that IAM groups are designed to associate policies with collections of users, while IAM roles are for temporary access and the root user must not be shared.
Using the appropriate IAM construct ensures secure, scalable, and compliant access control.

Key Concept

Managing user permissions collectively using IAM Groups
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic