Exam AWS Certified SysOps Administrator - Associate topic 1 question 351 discussion

read-only --> A, D. Assign policy to an IAM user --> remove A. Choose D.

A, D --> read-only access. D: cross-account IAM role --> Choose D.

D because I am D best admin in the world right now.

The most secure way to provide access between AWS accounts is by using IAM roles with cross-account access. And also, the security administrator only needs read-only access to review the VPC configuration.

When you set permissions with IAM policies, grant only the permissions required to perform a task. You do this by defining the actions that can be taken on specific resources under specific conditions, also known as least-privilege permissions. https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html

d..........

The most secure way for the security administrator to review the VPC configuration of developer AWS accounts would be to create an IAM policy in each developer account that has read-only access related to VPC resources and assign the policy to a cross-account IAM role. The security administrator can then assume the role from their own account to review the VPC configuration. This approach avoids sharing user credentials and provides the security administrator with the necessary permissions to review the VPC configuration without granting unnecessary access. So, the correct answer would be D. Create an IAM policy in each developer account that has read-only access related to VPC resources. Assign the policy to a cross-account IAM role. Ask the security administrator to assume the role from their account.

Answer C; a dev account with read-only access to VPC is ok whereas a dev account with admin access to VPC requires review.

Answer C; a dev account with read-only access to VPC is ok whereas a dev account with admin access to VPC requires review.

D , AWS = AlWays aSume the role

D is the answer

security administrator has their own AWS account so you should use cross-account and read only to follow least privilege principle