Correct Answer: AWS IAM Roles with cross-account access
AWS IAM Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily....
Correct Answer
AWS IAM Roles with cross-account access
Why This Answer Is Correct
AWS IAM Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
This question evaluates your knowledge of AWS IAM — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding AWS IAM is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Which IAM policy type is used to set the maximum permissions that an identity-based policy can grant to an IAM user or role?
A company uses AWS Organizations and wants to ensure that NO user in any account can delete S3 buckets, regardless of their individual IAM permissions. What should be used?
What is the recommended way to grant an EC2 instance permission to call other AWS services (like S3 or DynamoDB)?
Which IAM feature allows an architect to verify which permissions in a policy are actually being used by an entity, helping to implement the 'principle of least privilege'?
A company wants to allow employees to log into the AWS Management Console using their existing corporate credentials from Microsoft Active Directory. Which service is required?