Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM)

An organization needs to grant a new database administrator the necessary permissions to manage Amazon RDS resources on a daily basis. Which of the following actions aligns with the AWS-recommended best practice for securing this access?

  1. A
    Share the login credentials of the AWS account root user with the database administrator.
  2. Create an individual IAM user with the minimum required permissions to manage Amazon RDS resources.Answer
  3. C
    Assign the database administrator a temporary IAM role for all daily console access instead of creating an individual IAM user.
  4. D
    Open a request asking AWS Support to manage the database administrator's daily permission changes.

Answer

Create an individual IAM user with the minimum required permissions to manage Amazon RDS resources.
The correct action is to create an individual IAM user with the minimum required permissions. This aligns with the principle of least privilege by ensuring the database administrator only has access to Amazon RDS, and ensures accountability by using a unique identity rather than sharing credentials.

Step-by-Step Solution

1
Identify the entity requiring access.
A human database administrator requires daily access to the AWS Management Console.
Understanding the type of identity helps determine the appropriate access mechanism.
2
Apply the principle of least privilege and root account safety best practices.
Create an individual IAM user and assign only the permissions needed to manage RDS, while avoiding the use or sharing of the root account.
Ensures administrative accountability and limits access to only the necessary services.

Key Concept

AWS IAM Best Practices for User Access Control
Estimated Time:45s
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic