Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location PL
Mob_nav_barsMENU

Amazon Exam SOA-C02 Topic 4 Question 89 Discussion

Actual exam question for Amazon's SOA-C02 exam
Question #: 89
Topic #: 4
[All SOA-C02 Questions]

A company's application currently uses an IAM role that allows all access to all AWS services. A SysOps administrator must ensure that the company's IAM policies allow only the permissions that the application requires.

How can the SysOps administrator create a policy to meet this requirement?

Show Suggested Answer Hide Answer
Suggested Answer: D

Generate a policy by using AWS Identity and Access Management Access Analyzer. AWS CloudTrail is a service that records all API calls made on your account. You can use this data to generate a policy with AWS Identity and Access Management Access Analyzer that only allows the permissions that the application requires. This will ensure that the application only has the necessary permissions and will protect the company from any unauthorized access.

https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html#what-is-access-analyzer-policy-generation


by Leontine at Apr 22, 2024, 09:58 PM

Limited Time Offer

25%

Off

Get Premium SOA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Maia
6 months ago
That's an interesting perspective, David. But I think the consensus is more towards options B or D.
upvoted 0 times
...
Orville
6 months ago
I personally think A is the right answer, as utilizing AWS CloudTrail and Security Hub can help in creating the necessary policy.
upvoted 0 times
...
Maia
7 months ago
I see your point, D does seem like a better option for ensuring the IAM policies are correct.
upvoted 0 times
...
Jessenia
7 months ago
I think both B and D could be correct, but I'm leaning towards D for generating a policy using AWS CloudTrail.
upvoted 0 times
...
Kizzy
7 months ago
I disagree, I believe the correct answer is D, using AWS CloudTrail and IAM Access Analyzer.
upvoted 0 times
...
Maia
7 months ago
I think the answer is B, turn on Amazon EventBridge and generate a policy using IAM Access Analyzer.
upvoted 0 times
...
Darrin
8 months ago
That could work too, or we can turn on AWS CloudTrail and use IAM Access Analyzer.
upvoted 0 times
...
Lea
8 months ago
What about using the AWS CLI to run a get-generated-policy command?
upvoted 0 times
...
Solange
8 months ago
Or perhaps we can turn on Amazon EventBridge and use AWS IAM Access Analyzer.
upvoted 0 times
...
Darrin
8 months ago
I think we can turn on AWS CloudTrail and use AWS Security Hub.
upvoted 0 times
...
Lea
8 months ago
How can we create a policy to limit the permissions?
upvoted 0 times
Jaleesa
8 months ago
D) Turn on AWS CloudTrail. Generate a policy by using AWS Identity and Access Management Access Analyzer.
upvoted 0 times
...
Valentin
8 months ago
C) Use the AWS CLI to run the get-generated-policy command in AWS Identity and Access Management Access Analyzer.
upvoted 0 times
...
Maryrose
8 months ago
B) Turn on Amazon EventBridge (Amazon CloudWatch Events). Generate a policy by using AWS Identity and Access Management Access Analyzer.
upvoted 0 times
...
Claribel
8 months ago
A) Turn on AWS CloudTrail. Generate a policy by using AWS Security Hub.
upvoted 0 times
...
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77