Exam AWS Certified Cloud Practitioner topic 1 question 53 discussion

Another thing I've never, ever, seen mentioned anywhere else and would have to guess

Access Analyzer helps you identify the resources in your organization and accounts, such as Amazon S3 buckets or IAM roles, shared with an external entity. This lets you identify unintended access to your resources and data, which is a security risk. https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html

AWS IAM Access analyzer

Im here

The correct answer is C. AWS IAM Access Analyzer. AWS IAM Access Analyzer is a service that helps identify resources within your AWS organization that are shared with external entities. It specifically helps you identify S3 buckets, IAM roles, and other resources that may have unintended access permissions granted to external principals or accounts. The other options are different services: A. AWS Service Catalog: A service that enables organizations to create and manage catalogs of IT services that are approved for use on AWS. B. AWS Systems Manager: A service that allows you to centralize operational data and automate tasks across your AWS resources. D. AWS Organizations: A service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage.

keyword: keyword

Find out which resources are shared externally • S3 Buckets • IAM Roles • KMS Keys • Lambda Functions and Layers • SQS queues • Secrets Manager Secrets • Define Zone of Trust = AWS Account or AWS Organization • Access outside zone of trusts => findings

Keyword Identifies

AWS IAM Access Analyzer is a service that helps identify and review unintended access to resources in an AWS account. It uses automated reasoning to analyze resource policies, including S3 bucket policies and IAM roles, to identify any potential external access permissions. With IAM Access Analyzer, users can quickly identify whether their S3 bucket or IAM role has been shared with external entities such as other AWS accounts. It provides detailed findings that highlight any potential issues with access permissions and recommends actions to remediate them.

C. AWS IAM Access Analyzer

C. AWS IAM Access Analyzer

A - management of portfolio of services b - manage ec2 and on-premise instances C - D - manage member accounts answer: C

C is the answer.

Vote C https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html

https://www.google.com/search?q=Which+AWS+service+or+feature+identifies+whether+an+Amazon+S3+bucket+or+an+IAM+role+has+been+shared+with+an+external+entity%3F&rlz=1C1GCEU_zh-TWTW1015TW1015&sourceid=chrome&ie=UTF-8 CRRECT ANSWER C

Vote for C