A company is setting up a new AWS account and needs to organize access permissions for several system administrators and developers. According to AWS Identity and Access Management (IAM) best practices, which TWO statements correctly describe the characteristics and usage of IAM groups? (Select TWO.)
- They allow administrators to assign permissions to multiple IAM users simultaneously by attaching a policy to the group.Cevap
- They are collections of IAM users and do not possess their own login credentials or access keys.Cevap
- CThey can be nested inside other IAM groups to build hierarchical permission structures.
- DThey can be assumed by EC2 instances and other AWS services to temporarily obtain access keys.
- EThey are used to share the AWS account root user password securely among administrative staff.
Cevap
The correct statements are that IAM groups allow administrators to assign permissions to multiple users at once by attaching a policy, and that they are collections of users without their own security credentials.
IAM groups are designed to simplify permission management by allowing administrators to apply policies to multiple users at once. Because they are administrative collections rather than entities that take action, they do not have login credentials or access keys of their own.
Adım Adım Çözüm
Anahtar Kavram
IAM groups simplify access management by applying policies to multiple users at once, and they do not have credentials or support nesting.