Study. uk . com
  1. Home
  2. All questions
  3. Question 74

AWS Certified Solutions Architect study material · question 74 of 500

An IAM user switches to a role in the console. What happens to their original permissions?

  1. They are permanently replaced by the role's permissions
  2. They remain in force, and the role adds nothing
  3. They are given up for the role's permissions, and restored on exiting the role
  4. They are combined with the role's permissions for the session
Show the answer

Answer: C. They are given up for the role's permissions, and restored on exiting the role

Switching to a role trades the user's own permissions for the role's; leaving the role restores them, which limits accidental access.

Source: Common scenarios for IAM roles (Amazon Web Services) — Common scenarios for roles

Challenge yourself on this topic → Study as cards