Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location PL
Mob_nav_barsMENU

Amazon Exam SOA-C02 Topic 4 Question 89 Discussion

Actual exam question for Amazon's SOA-C02 exam
Question #: 89
Topic #: 4
[All SOA-C02 Questions]

A company's application currently uses an IAM role that allows all access to all AWS services. A SysOps administrator must ensure that the company's IAM policies allow only the permissions that the application requires.

How can the SysOps administrator create a policy to meet this requirement?

Show Suggested Answer Hide Answer
Suggested Answer: D

Generate a policy by using AWS Identity and Access Management Access Analyzer. AWS CloudTrail is a service that records all API calls made on your account. You can use this data to generate a policy with AWS Identity and Access Management Access Analyzer that only allows the permissions that the application requires. This will ensure that the application only has the necessary permissions and will protect the company from any unauthorized access.

https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html#what-is-access-analyzer-policy-generation


by Leontine at Apr 22, 2024, 09:58 PM

Limited Time Offer

25%

Off

Get Premium SOA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Maia
11 months ago
That's an interesting perspective, David. But I think the consensus is more towards options B or D.
upvoted 0 times
...
Orville
11 months ago
I personally think A is the right answer, as utilizing AWS CloudTrail and Security Hub can help in creating the necessary policy.
upvoted 0 times
...
Maia
11 months ago
I see your point, D does seem like a better option for ensuring the IAM policies are correct.
upvoted 0 times
...
Jessenia
11 months ago
I think both B and D could be correct, but I'm leaning towards D for generating a policy using AWS CloudTrail.
upvoted 0 times
...
Kizzy
12 months ago
I disagree, I believe the correct answer is D, using AWS CloudTrail and IAM Access Analyzer.
upvoted 0 times
...
Maia
1 years ago
I think the answer is B, turn on Amazon EventBridge and generate a policy using IAM Access Analyzer.
upvoted 0 times
...
Darrin
1 years ago
That could work too, or we can turn on AWS CloudTrail and use IAM Access Analyzer.
upvoted 0 times
...
Lea
1 years ago
What about using the AWS CLI to run a get-generated-policy command?
upvoted 0 times
...
Solange
1 years ago
Or perhaps we can turn on Amazon EventBridge and use AWS IAM Access Analyzer.
upvoted 0 times
...
Darrin
1 years ago
I think we can turn on AWS CloudTrail and use AWS Security Hub.
upvoted 0 times
...
Lea
1 years ago
How can we create a policy to limit the permissions?
upvoted 0 times
Jaleesa
1 years ago
D) Turn on AWS CloudTrail. Generate a policy by using AWS Identity and Access Management Access Analyzer.
upvoted 0 times
...
Valentin
1 years ago
C) Use the AWS CLI to run the get-generated-policy command in AWS Identity and Access Management Access Analyzer.
upvoted 0 times
...
Maryrose
1 years ago
B) Turn on Amazon EventBridge (Amazon CloudWatch Events). Generate a policy by using AWS Identity and Access Management Access Analyzer.
upvoted 0 times
...
Claribel
1 years ago
A) Turn on AWS CloudTrail. Generate a policy by using AWS Security Hub.
upvoted 0 times
...
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77