Study. uk . com
  1. Home
  2. All questions
  3. Question 82

AWS Certified Solutions Architect study material · question 82 of 500

Which two practices does IAM security guidance recommend for reducing standing permissions? Choose two.

  1. Giving every workload an IAM user with its own access key
  2. Attaching the AdministratorAccess policy and auditing usage afterwards
  3. Reviewing access-last-used data and removing unused users, roles and keys
  4. Adding condition keys so a grant applies only in intended circumstances
Show the answer

Answer: C. Reviewing access-last-used data and removing unused users, roles and keys
D. Adding condition keys so a grant applies only in intended circumstances

Both narrow standing permissions. Handing out IAM users with long-term keys, or starting from full administrator rights, does the opposite.

Source: Security best practices in IAM (Amazon Web Services) — Regularly review and remove unused credentials

Challenge yourself on this topic → Study as cards