Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM)

A company needs to grant a newly hired customer support team read-only access to specific Amazon S3 buckets. Which of the following identity and access management (IAM) practices should the administrator use to configure this access? (Select TWO.)

  1. Create an IAM group and add the individual customer support IAM users to it.Answer
  2. Attach the S3 read-only IAM policy directly to the IAM group.Answer
  3. C
    Provide the AWS account root user login credentials to the customer support team.
  4. D
    Create a single IAM role and configure it to use permanent, long-term access keys for all team members.
  5. E
    Submit a technical support case to AWS Support to configure S3 permissions on the customer's behalf.

Answer

Create an IAM group to manage the customer support users collectively, and attach the Amazon S3 read-only IAM policy directly to that group.
The correct practices involve creating an IAM group to manage the customer support team collectively and attaching the S3 read-only IAM policy directly to that group. This aligns with the AWS best practice of using groups to manage permissions for multiple users with similar access needs, ensuring administrative overhead is reduced and permissions are inherited consistently.

Step-by-Step Solution

1
Group creation
An IAM group is created for the customer support team, and individual IAM user accounts are created for each agent and added to this group.
This establishes a logical boundary for managing permissions for a team of people with the same job function, following standard identity management practices.
2
Policy attachment
The S3 read-only IAM policy is attached directly to the group.
By attaching the policy to the group, all users added to the group automatically inherit the required permissions without needing direct policy assignment.

Key Concept

AWS IAM permissions management using IAM groups and policies to control access to resources.
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic