Amazon Exam SAA-C02 Topic 3 Question 33 Discussion

Actual exam question for Amazon's SAA-C02 exam

Question #: 33
Topic #: 3

A new employee has joined a company as a deployment engineer. The deployment engineer will be using AWS CloudFormation templates to create multiple AWS resources. A solutions architect wants the deployment engineer to perform job activities while following the principle of least privilege.

Which steps should the solutions architect do in conjunction to reach this goal? (Select two.)

AHave the deployment engineer use AWS account roof user credentials for performing AWS CloudFormation stack operations.

BCreate a new IAM user for the deployment engineer and add the IAM user to a group that has the PowerUsers IAM policy attached.

CCreate a new IAM user for the deployment engineer and add the IAM user to a group that has the Administrate/Access IAM policy attached.

DCreate a new IAM User for the deployment engineer and add the IAM user to a group that has an IAM policy that allows AWS CloudFormation actions only.

ECreate an IAM role for the deployment engineer to explicitly define the permissions specific to the AWS CloudFormation stack and launch stacks using Dial IAM role.

Show Suggested Answer

Suggested Answer: D, E

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users.html

by Wilda at Oct 23, 2022, 09:25 PM

Limited Time Offer

25%

Off

Get Premium SAA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!