Examtopics

AWS Certified SysOps Administrator - Associate

  • Topic 1 Question 221

    A company’s application currently uses an IAM role that allows all access to all AWS services. A SysOps administrator must ensure that the company’s IAM policies allow only the permissions that the application requires.

    How can the SysOps administrator create a policy to meet this requirement?

    • Turn on AWS CloudTrail. Generate a policy by using AWS Security Hub.

    • Turn on Amazon EventBridge (Amazon CloudWatch Events). Generate a policy by using AWS Identity and Access Management Access Analyzer.

    • Use the AWS CLI to run the get-generated-policy command in AWS Identity and Access Management Access Analyzer.

    • Turn on AWS CloudTrail. Generate a policy by using AWS Identity and Access Management Access Analyzer.

    シャッフルモード