The following IAM policy is attached to an IAM group. This is the only policy applied to the group. IMAGE What are the effective IAM permissions of this policy for group members?

Questions › Category: SAA-C03 › The following IAM policy is attached to an IAM group. This is the only policy applied to the group. IMAGE What are the effective IAM permissions of this policy for group members?

0 Vote Up Vote Down

Admin Staff asked 1 year ago

The following IAM policy is attached to an IAM group. This is the only policy applied to the group.
IMAGE
What are the effective IAM permissions of this policy for group members?

A. Group members are permitted any Amazon EC2 action within the us-east-1 Region. Statements after the Allow permission are not applied.

B. Group members are denied any Amazon EC2 permissions in the us-east-1 Region unless they are logged in with multi-factor authentication (MFA).

C. Group members are allowed the ec2:StopInstances and ec2:TerminateInstances permissions for all Regions when logged in with multi- factor authentication (MFA). Group members are permitted any other Amazon EC2 action.

D. Group members are allowed the ec2:StopInstances and ec2:TerminateInstances permissions for the us-east-1 Region only when logged in with multi-factor authentication (MFA). Group members are permitted any other Amazon EC2 action within the us-east-1 Region.








 

Correct Answer: D

This question is in SAA-C03 exam
For getting AWS Certified Solutions Architect Associate Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Amazon.
Trademarks, certification & product names are used for reference only and belong to Amazon.
The website does not contain actual questions and answers from Amazon's Certification Exams.