Exam AWS Certified Database - Specialty topic 1 question 71 discussion

ACD are right

A. Least previleges C. Multi factor D. restrict access

I go fro ACE. IP address is not a reliable decision tool.

A. Grant least privilege to groups, users, and roles C. Enable multi-factor authentication for sensitive operations to access sensitive resources and API operations D. Use policy conditions to restrict access to selective IP addresses

ACD are correct options

There's no AccessList Controls for RDS, so based on that goes for ACD

the correct options are A, C, and D.

Can someone explain why E isn't plausible? I didn't choose D because sometimes developers are need access to Prod environments and restricting their IPs doesn't mean they can't utilize another IP to do the same damage.

ACE. { "Version": "2012-10-17", "Statement": [ { "Action": [ "rds:DeleteDBInstance" ], "Resource": [ "arn:aws:rds:::db:" ], "Effect": "Deny" } ] }

Prevent a user from deleting a DB instance The following permissions policy grants permissions to prevent a user from deleting a specific DB instance. For example, you might want to deny the ability to delete your production DB instances to any user that is not an administrator. { "Version": "2012-10-17", "Statement": [ { "Sid": "DenyDelete1", "Effect": "Deny", "Action": "rds:DeleteDBInstance", "Resource": "arn:aws:rds:us-west-2:123456789012:db:my-mysql-instance" } ] } ABE-- Wording of the question not very accurate. RDS Access polict can be done this way but there is nothing called as Access Control list poicy type in RDS

Appropriate and RDS supported options

Agree with ACD https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/security_iam_id-based-policy-examples.html

I got this Question in exam. 60% questions came in actual exam from this 145 set. Bunch of new Questions. We can share study material for free, You can email me on "awsdbguru at gmail"

Correct Answer ==>> ACD any idea how much Q we will get in real exam from Q available here? anyone is preparing for this exam and want to do group study with us, comment with mail_id.

ACD are correct choices. MFA is specified in the aws docs specifically for such use case https://aws.amazon.com/blogs/database/using-iam-multifactor-authentication-with-amazon-rds/

I go for ACE

Ans: ACD