Scenario: To minimize the blast radius of a potential insider threat, you want to ensure that no single IAM user can delete a critical production database without a multi-step approval process involving another team. Solution ?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Remove 'RDS:DeleteDBInstance' from all users; use a Step Functions workflow with manual approvals to perform the action

Formalizing destructive actions behind a serverless workflow with multiple approvals is a key security pattern for critical production systems....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioScenario Based

Scenario: To minimize the blast radius of a potential insider threat, you want to ensure that no single IAM user can delete a critical production database without a multi-step approval process involving another team. Solution ?

✓ Correct Answer & ExplanationScenario Based

Correct Answer

Remove 'RDS:DeleteDBInstance' from all users; use a Step Functions workflow with manual approvals to perform the action

Why This Answer Is Correct

Formalizing destructive actions behind a serverless workflow with multiple approvals is a key security pattern for critical production systems.

📚 What This Question Tests

This question evaluates your knowledge of Scenario Based — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.