Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 922 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03

Question #: 922
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A company needs to grant a team of developers access to the company's AWS resources. The company must maintain a high level of security for the resources.

The company requires an access control solution that will prevent unauthorized access to the sensitive data.

Which solution will meet these requirements?

A. Share the IAM user credentials for each development team member with the rest of the team to simplify access management and to streamline development workflows.
B. Define IAM roles that have fine-grained permissions based on the principle of least privilege. Assign an IAM role to each developer.
C. Create IAM access keys to grant programmatic access to AWS resources. Allow only developers to interact with AWS resources through API calls by using the access keys.
D. Create an AWS Cognito user pool. Grant developers access to AWS resources by using the user pool.

Show Suggested Answer

Suggested Answer: B 🗳️

by muhammadahmer36 at Aug. 13, 2024, 7:41 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

LeonSauveterre

5 months, 3 weeks ago

Selected Answer: B

A - Sharing IAM user credentials is a security risk and violates AWS best practices. B - IAM roles allow for temporary credentials that can be automatically rotated, and that improves security. C - Would work but managing static keys for multiple developers introduces significant operational overhead. D - AWS Cognito is primarily designed for managing end-user authentication (for web or mobile apps or such), not for managing access to AWS resources for developers.

upvoted 1 times

hpirnaj

5 months, 3 weeks ago

it says " team of developers " . they are not in the company's AWS account. how do you want to apply IAM roles without defining users ? I think C is the answer

upvoted 1 times

hpirnaj

5 months, 2 weeks ago

also, roles can not assign to user/group . you need to make a policy from IAM roles first then assign policies to user/group

upvoted 1 times

...

KennethYY

6 months ago

Selected Answer: D

A is wrong, common sense not security B is wrong, role cannot assign to user/group D is wrong, is designed for authentication and access control for web or mobile app users, not for internal developers accessing AWS resources. so remain C.

upvoted 1 times

...