Study. uk . com
  1. Home
  2. All questions
  3. Question 77

AWS Certified Solutions Architect study material · question 77 of 500

What is the practical difference between an AWS managed policy and a customer managed policy?

  1. Only the first can be attached to a role
  2. Only the second can contain an explicit deny
  3. The first is Regional while the second is global
  4. AWS maintains the first, while the second is the account's own and can be scoped precisely
Show the answer

Answer: D. AWS maintains the first, while the second is the account's own and can be scoped precisely

AWS managed policies are authored and updated by AWS; customer managed policies belong to the account and allow far tighter scoping.

Source: Policies and permissions in AWS Identity and Access Managem… (Amazon Web Services) — Identity-based policies

Challenge yourself on this topic → Study as cards