Examtopics

AWS Certified Solutions Architect - Associate

  • Topic 1 Question 924

    A company runs all its business applications in the AWS Cloud. The company uses AWS Organizations to manage multiple AWS accounts.

    A solutions architect needs to review all permissions that are granted to IAM users to determine which IAM users have more permissions than required.

    Which solution will meet these requirements with the LEAST administrative overhead?

    • Use Network Access Analyzer to review all access permissions in the company's AWS accounts.

    • Create an AWS CloudWatch alarm that activates when an IAM user creates or modifies resources in an AWS account.

    • Use AWS Identity and Access Management (IAM) Access Analyzer to review all the company’s resources and accounts.

    • Use Amazon Inspector to find vulnerabilities in existing IAM policies.

    シャッフルモード