Study. uk . com
  1. Home
  2. All questions
  3. Question 101

AWS Certified Solutions Architect study material · question 101 of 500

Which two policy types set a maximum on permissions without granting any themselves? Choose two.

  1. A service control policy
  2. An identity-based policy
  3. A resource-based policy
  4. A permissions boundary
Show the answer

Answer: D. A permissions boundary
A. A service control policy

Boundaries and SCPs both define a ceiling and grant nothing; identity-based and resource-based policies are what actually grant permissions.

Source: Policies and permissions in AWS Identity and Access Managem… (Amazon Web Services) — AWS Organizations service control policies (SCPs)

Challenge yourself on this topic → Study as cards