Question

Difficulty: EasyIdentity and Access Management (IAM)

A company needs to grant a newly hired security analyst access to the AWS Management Console to audit resource configurations. The analyst requires their own permanent credentials to log in. Which IAM entity should the administrator create to meet this requirement?

  1. A
    An IAM role
  2. An IAM userAnswer
  3. C
    A new AWS account root user
  4. D
    An AWS Support ticket requesting AWS to generate console login credentials

Answer

An IAM user
An IAM user represents a person or service that requires permanent credentials to interact with AWS, making it the correct entity for a new employee requiring long-term console access.

Step-by-Step Solution

1
Identify the requirement for permanent, individual console login credentials.
Determine that the employee needs a unique identity with persistent login credentials.
This helps select the appropriate credential type in AWS IAM.
2
Compare AWS IAM entities to identify the correct resource.
An IAM user provides the long-term credentials (password and access keys) needed for direct console login.
IAM roles are for temporary credentials, and root accounts should not be used for daily tasks.

Key Concept

IAM Users vs. IAM Roles and Credentials Best Practices
Estimated Time:45s
Rate this question