Study. uk . com
  1. Home
  2. All questions
  3. Question 12

AWS Certified Solutions Architect study material · question 12 of 500

An auditor asks which S3 buckets and IAM roles are reachable from outside the account. Which service reports that exposure?

  1. IAM Access Analyzer
  2. AWS Secrets Manager
  3. Amazon Cognito
  4. AWS Certificate Manager
Show the answer

Answer: A. IAM Access Analyzer

IAM Access Analyzer surfaces resources reachable publicly or from outside the account, which is how unintended sharing is discovered.

Source: Security best practices in IAM (Amazon Web Services) — Verify public and cross-account access with IAM Access Analyzer

Challenge yourself on this topic → Study as cards