Study. uk . com
  1. Home
  2. All questions
  3. Question 137

AWS Certified Solutions Architect study material · question 137 of 500

An administrator removes a permissions boundary from an IAM user. What is the possible effect?

  1. The user loses all permissions until a new boundary is attached
  2. The user's identity-based policies are deleted
  3. Nothing changes, because boundaries apply only at creation
  4. The user may be able to perform more actions than before
Show the answer

Answer: D. The user may be able to perform more actions than before

Effective permissions are the intersection of boundary and identity policies, so removing the boundary can only widen what the user may do.

Source: Policy evaluation logic (Amazon Web Services) — Evaluating identity-based policies with permissions boundaries

Challenge yourself on this topic → Study as cards