Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM)

A startup needs to grant a new database administrator access to manage Amazon RDS databases. Which of the following actions aligns with AWS security best practices for identity management?

  1. Create a dedicated IAM user for the database administrator and attach an identity-based policy containing only the permissions required for Amazon RDS management.Answer
  2. B
    Provide the database administrator with the login credentials of the AWS account root user so they can access all database management features directly.
  3. C
    Configure a single shared IAM user account with administrative permissions for the entire database administration team to simplify credential management.
  4. D
    Create an IAM role for the database administrator's permanent daily console access rather than creating an individual IAM user.

Answer

Create a dedicated IAM user for the database administrator and attach an identity-based policy containing only the permissions required for Amazon RDS management.
The correct option outlines the standard AWS identity best practice: creating a distinct, individual IAM user for each person requiring access and attaching an identity-based policy restricted to only the resources they need (least privilege).

Step-by-Step Solution

1
Identify the type of identity required for an internal human user who needs permanent, daily access.
An individual IAM user must be created rather than sharing credentials or using temporary roles directly for daily login without federation.
This establishes accountability and ensures that individual actions can be audited.
2
Determine the minimum permissions required for the user to perform their specific job function.
An identity-based IAM policy should be created and attached to the user, granting access only to Amazon RDS resources.
This adheres to the principle of least privilege, minimizing the security footprint of the user credentials.

Key Concept

AWS identity management best practices including the use of individual IAM users and the principle of least privilege.
Estimated Time:45s
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic