QuestionQ506

Content Domain 2: Security and Compliance

Which guidelines are best practices for using AWS Identity and Access Management (IAM)?

Choose two
  • A Share access keys.
  • B Create individual IAM users.
  • C Use inline policies instead of customer managed policies.
  • D Grant maximum privileges to IAM users.
  • E Use groups to assign permissions to IAM users.
Explanation

IAM best practices emphasize creating individual user accounts rather than sharing credentials (eliminating option A), and using IAM groups to manage permissions at scale (making group-based assignment far more maintainable than individual policy assignments). Customer-managed policies are also preferred over inline policies for reusability, and the principle of least privilege—not maximum privileges—is fundamental to secure access control.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!