Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon Exam SOA-C02 Topic 4 Question 89 Discussion

Actual exam question for Amazon's SOA-C02 exam
Question #: 89
Topic #: 4
[All SOA-C02 Questions]

A company's application currently uses an IAM role that allows all access to all AWS services. A SysOps administrator must ensure that the company's IAM policies allow only the permissions that the application requires.

How can the SysOps administrator create a policy to meet this requirement?

Show Suggested Answer Hide Answer
Suggested Answer: D

Generate a policy by using AWS Identity and Access Management Access Analyzer. AWS CloudTrail is a service that records all API calls made on your account. You can use this data to generate a policy with AWS Identity and Access Management Access Analyzer that only allows the permissions that the application requires. This will ensure that the application only has the necessary permissions and will protect the company from any unauthorized access.

https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html#what-is-access-analyzer-policy-generation


by Leontine at Apr 22, 2024, 09:58 PM

Limited Time Offer

25%

Off

Get Premium SOA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Maia
10 months ago
That's an interesting perspective, David. But I think the consensus is more towards options B or D.
upvoted 0 times
...
Orville
10 months ago
I personally think A is the right answer, as utilizing AWS CloudTrail and Security Hub can help in creating the necessary policy.
upvoted 0 times
...
Maia
11 months ago
I see your point, D does seem like a better option for ensuring the IAM policies are correct.
upvoted 0 times
...
Jessenia
11 months ago
I think both B and D could be correct, but I'm leaning towards D for generating a policy using AWS CloudTrail.
upvoted 0 times
...
Kizzy
11 months ago
I disagree, I believe the correct answer is D, using AWS CloudTrail and IAM Access Analyzer.
upvoted 0 times
...
Maia
11 months ago
I think the answer is B, turn on Amazon EventBridge and generate a policy using IAM Access Analyzer.
upvoted 0 times
...
Darrin
12 months ago
That could work too, or we can turn on AWS CloudTrail and use IAM Access Analyzer.
upvoted 0 times
...
Lea
12 months ago
What about using the AWS CLI to run a get-generated-policy command?
upvoted 0 times
...
Solange
12 months ago
Or perhaps we can turn on Amazon EventBridge and use AWS IAM Access Analyzer.
upvoted 0 times
...
Darrin
12 months ago
I think we can turn on AWS CloudTrail and use AWS Security Hub.
upvoted 0 times
...
Lea
12 months ago
How can we create a policy to limit the permissions?
upvoted 0 times
Jaleesa
12 months ago
D) Turn on AWS CloudTrail. Generate a policy by using AWS Identity and Access Management Access Analyzer.
upvoted 0 times
...
Valentin
12 months ago
C) Use the AWS CLI to run the get-generated-policy command in AWS Identity and Access Management Access Analyzer.
upvoted 0 times
...
Maryrose
12 months ago
B) Turn on Amazon EventBridge (Amazon CloudWatch Events). Generate a policy by using AWS Identity and Access Management Access Analyzer.
upvoted 0 times
...
Claribel
12 months ago
A) Turn on AWS CloudTrail. Generate a policy by using AWS Security Hub.
upvoted 0 times
...
...

Save Cancel