The following IAM policy is attached to an IAM group. This is the only policy applied to the group. What are the effective IAM permissions of this policy for group members?
A.
Group members are permitted any Amazon EC2 action within the us-east-1 Region. Statements after the Allow permission are not applied.
B.
Group members are denied any Amazon EC2 permissions in the us-east-1 Region unless they are logged in with multi-factor authentication (MFA).
C.
Group members are allowed the ec2:StopInstances and ec2:TerminateInstances permissions for all Regions when logged in with multi-factor authentication (MFA). Group members are permitted any other Amazon EC2 action.
D.
Group members are allowed the ec2:StopInstances and ec2:TerminateInstances permissions for the us-east-1 Region only when logged in with multi-factor authentication (MFA). Group members are permitted any other Amazon EC2 action within the us-east-1 Region.
ANS: D
Other option not giving info on first policy condition.. only D is saying ..Group members are permitted any other Amazon EC2 action (except ec2:StopInstances and ec2:TerminateInstances) within the us-east-1 Region.
Passed exam today 1st DEC 2021, this question was appear in my exam and selected D.
I learned lots of things from here and I Thankfull to those people who providing the right answers with explanation,
D is correct. you can do only what is allowed via policy:
https://docs.aws.amazon.com/AWSEC2/latest/APIReference/ec2-api-permissions.html
By default, AWS Identity and Access Management (IAM) users don't have permission to create or modify Amazon EC2 resources, or perform tasks using the Amazon EC2 API. To allow IAM users to create or modify resources and perform tasks, you must create IAM policies that grant IAM users permissions for the specific resources and API actions they'll need to use, and then attach those policies to the IAM users or groups that require those permissions.
1st part of policy allows all actions in us-east-1 Region
2nd part deny stop and terminate in all regions for users without MFA
upvoted 11 times
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
AnuhyaTech
Highly Voted 3 years, 3 months agosic6sic
Highly Voted 3 years, 2 months agoCarlos_O
Most Recent 1 year, 3 months agojj22222
3 years agoUltron00
3 years, 1 month agoImtiazCloudInfra
3 years, 1 month agoImtiazCloudInfra
3 years, 1 month agoGats
3 years, 2 months agopatriktre
3 years, 2 months agopatriktre
3 years, 2 months ago