Your organization wants to implement 'Attribute-based Access Control' (ABAC) to simplify IAM management. They want to ensure that developers can only start/stop EC2 instances that have a 'Project' tag matching the 'Project' tag on the developer's IAM user. Which IAM policy element is used to achieve this comparison?

You need to grant developers read-only access to Amazon S3 buckets without giving them access to other services. What's the best approach using AWS IAM?

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What AWS IAM feature should you use?

You need to grant developers read-only access to Amazon S3 buckets without giving them access to other services. What's the best approach using AWS IAM?

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What AWS IAM feature should you use?

You need to grant developers read-only access to Amazon S3 buckets without giving them access to other services. What's the best approach using AWS IAM?