Correct Answer: IAM Access Advisor
Access Advisor shows 'Last Accessed' information for services, helping you identify and remove unused permissions....
Correct Answer
IAM Access Advisor
Why This Answer Is Correct
Access Advisor shows 'Last Accessed' information for services, helping you identify and remove unused permissions.
This question evaluates your knowledge of AWS IAM — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding AWS IAM is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Which IAM policy type is used to set the maximum permissions that an identity-based policy can grant to an IAM user or role?
Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What AWS IAM feature should you use?
A company uses AWS Organizations and wants to ensure that NO user in any account can delete S3 buckets, regardless of their individual IAM permissions. What should be used?
What is the recommended way to grant an EC2 instance permission to call other AWS services (like S3 or DynamoDB)?
A company wants to allow employees to log into the AWS Management Console using their existing corporate credentials from Microsoft Active Directory. Which service is required?