Exam AWS Certified Security - Specialty SCS-C02 topic 1 question 71 discussion

Option B, which involves examining the developer's IAM roles and removing all permissions that grant access to AWS Signer, is not as effective as revoking the signing profile. While removing IAM permissions can prevent the developer from accessing AWS Signer in the future, it does not invalidate the signatures that have already been created using the developer's signing profile. This means that any code signed by the developer before their permissions were revoked could still be deployed to the Lambda functions. Revoking all versions of the signing profile assigned to the developer ensures that any signatures generated by that profile are no longer valid, effectively preventing the deployment of the developer's cod

https://docs.aws.amazon.com/signer/latest/developerguide/revocation.html

The privilege has to be removed from signer , for this option b is the right answer

Option A suggests revoking all versions of the signing profile assigned to the developer, but this is not the most effective solution for preventing the developer from deploying code to Lambda functions. Signing profiles primarily deal with the integrity and authenticity of code, rather than controlling the ability to deploy code

Answer A New URL: https://docs.aws.amazon.com/signer/latest/developerguide/revocation.html

A Refer to https://docs.aws.amazon.com/signer/latest/developerguide/revoking.html https://docs.aws.amazon.com/signer/latest/developerguide/revoking.html

A is the correct answer. Revoke the developer signing profile - https://docs.aws.amazon.com/signer/latest/developerguide/revocation.html

A will handle prevention

correct