Study. uk . com
  1. Home
  2. All questions
  3. Question 1

AWS Certified Solutions Architect study material · question 1 of 500

An architect attaches a permissions boundary to an IAM role that already has an administrator policy. What effect does the boundary have on the role?

  1. It grants the role every action listed in the boundary
  2. It replaces the role's identity-based policies entirely
  3. It has no effect until the role is used cross-account
  4. It caps the role to actions allowed by both the boundary and its identity-based policies
Show the answer

Answer: D. It caps the role to actions allowed by both the boundary and its identity-based policies

A permissions boundary only sets a ceiling. The effective permissions are the intersection of the boundary and the identity-based policies; the boundary grants nothing itself.

Source: Policies and permissions in AWS Identity and Access Managem… (Amazon Web Services) — IAM permissions boundaries

Challenge yourself on this topic → Study as cards