A growing digital marketing agency wants to streamline permissions management for its designers, copywriters, and analysts. The agency needs to ensure that when a new designer joins, they automatically receive the correct permissions, and when they change roles, their permissions are updated easily. Which of the following options represent AWS-recommended best practices to achieve this? (Select TWO.)
- Organize IAM users into IAM groups based on job functions and attach policies to the groups.Cevap
- BAttach individual IAM policies directly to each employee's IAM user account.
- Apply the principle of least privilege by granting only the permissions required for each job function.Cevap
- DCreate a single shared IAM user account with administrative privileges for all members of the design team.
- EUse the AWS account root user credentials to perform daily management of employee permissions.
Cevap
Organizing IAM users into groups based on job functions and applying the principle of least privilege by granting only the necessary permissions.
Organizing users into IAM groups based on job functions simplifies the management of permissions because policies can be attached to the group rather than individual users. Moving a user between groups automatically updates their permissions. Additionally, applying the principle of least privilege ensures that users have only the minimum access necessary, which improves security.
Adım Adım Çözüm
Anahtar Kavram
AWS IAM Groups and the Principle of Least Privilege