An organization has created one IAM user and applied the below mentioned policy to the user. What entitlements do the IAM users avail with this policy?
A.
The policy will allow the user to perform all read only activities on the EC2 services
B.
The policy will allow the user to list all the EC2 resources except EBS
C.
The policy will allow the user to perform all read and write activities on the EC2 services
D.
The policy will allow the user to perform all read only activities on the EC2 services except load Balancing
Suggested Answer:D🗳️
AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. If an organization wants to setup read only access to EC2 for a particular user, they should mention the action in the IAM policy which entitles the user for Describe rights for EC2, CloudWatch, Auto Scaling and ELB. In the policy shown below, the user will have read only access for EC2 and EBS, CloudWatch and Auto Scaling. Since ELB is not mentioned as a part of the list, the user will not have access to ELB.
A. The policy will allow the user to perform all read only activities on the EC2 services.
"ec2:Describe*" means describe all ec2 resources. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policies-ec2-console.html
Load balancing is excluded but so is EBS.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
TroyMcLure
5 months, 4 weeks ago4007
6 months, 1 week agoThomasY
6 months agoAWS_Noob
6 months, 3 weeks agoawscertified
6 months, 3 weeks agokarmaah
7 months, 2 weeks agokarmaah
7 months, 1 week ago