Study. uk . com
  1. Home
  2. All questions
  3. Question 127

AWS Certified Solutions Architect study material · question 127 of 500

Which two statements about how a session policy affects an assumed role are correct? Choose two.

  1. A session policy persists on the role after the session ends
  2. The session's permissions are the intersection of the session policy and the role's policies
  3. A session policy limits permissions but grants none
  4. A session policy can grant permissions the role does not have
Show the answer

Answer: B. The session's permissions are the intersection of the session policy and the role's policies
C. A session policy limits permissions but grants none

Session policies narrow a session to the overlap with the role's own policies; they never widen it and do not outlive the session.

Source: Policies and permissions in AWS Identity and Access Managem… (Amazon Web Services) — Session policies

Challenge yourself on this topic → Study as cards