Soru

Zorluk: KolayIdentity and Access Management (IAM)

A healthcare organization hires a new compliance officer who needs permanent, individual access to log into the AWS Management Console to review compliance reports. Which AWS Identity and Access Management (IAM) entity should be created to grant this access?

  1. A
    An IAM role
  2. B
    The AWS account root user
  3. An IAM userCevap
  4. D
    An AWS Support ticket requesting AWS to configure local account access

Cevap

An IAM user
An IAM user is the correct entity to create because it represents a specific person or service that requires permanent credentials to interact with AWS, such as logging into the AWS Management Console.

Adım Adım Çözüm

1
Identify the access requirement, which is a new permanent employee (compliance officer) needing individual login credentials to the AWS Management Console.
The scenario requires permanent, individual credentials rather than temporary or shared access.
Understanding the nature of the worker's access requirement determines whether an IAM user or IAM role is appropriate.
2
Evaluate the AWS security best practices for daily operational access.
Individual IAM users should be created for daily tasks, and root user usage should be restricted.
Applying the principle of least privilege and administrative isolation secures the account.

Anahtar Kavram

AWS Identity and Access Management (IAM) Entities
Tahmini Süre:45s
Bu soruyu puanla