Examkin

Soru

Zorluk: KolayIdentity and Access Management (IAM)

An organization is setting up access controls for a new application developer who needs to manage Amazon S3 buckets and Amazon EC2 instances. Which of the following is the AWS-recommended method to configure this access?

  1. Create an individual IAM user for the developer and attach policy permissions that grant only the required access.Cevap
  2. B
    Provide the developer with the AWS account root user login credentials to simplify administrative management.
  3. C
    Create an IAM role for the developer and configure it with a permanent password for direct console login.
  4. D
    Request AWS Support to create and maintain the developer's credentials under the AWS Shared Responsibility Model.

Cevap

Create an individual IAM user for the developer and attach policy permissions that grant only the required access.
Creating a dedicated IAM user and applying the principle of least privilege ensures that the developer has a unique identity and only the permissions required to do their job, which aligns with AWS security best practices.

Adım Adım Çözüm

1
Determine the entity type needed for a human operator who requires long-term credentials to access the AWS Management Console.
An IAM user is the correct choice because IAM users represent individuals who require permanent credentials.
This establishes accountability and follows the design pattern for human operators.
2
Determine the appropriate permissions configuration based on AWS security standards.
Apply the principle of least privilege by attaching a policy that only grants access to S3 and EC2.
This minimizes security risks by preventing the developer from accessing unrelated services or sensitive actions.

Anahtar Kavram

Best practices for AWS Identity and Access Management (IAM), including using IAM users for human operators, practicing least privilege, and avoiding root user usage.
Tahmini Süre:45s
Bu soruyu puanla

Konular

Identity and Access Management (IAM)

Bu konudan daha fazla soru