A Company's Security Engineer Has Been Tasked with Restricting a Contractor's

question 277

Multiple Choice

A company's Security Engineer has been tasked with restricting a contractor's IAM account access to the company's Amazon EC2 console without providing access to any other AWS services. The contractor's IAM account must not be able to gain access to any other AWS service, even if the IAM account is assigned additional permissions based on IAM group membership. What should the Security Engineer do to meet these requirements?

• A) Create an Inline IAM user policy that allows for Amazon EC2 access for the contractor's IAM user.
• B) Create an IAM permissions boundary policy that allows Amazon EC2 access. Associate the contractor's IAM account with the IAM permissions boundary policy.
• C) Create an IAM group with an attached policy that allows for Amazon EC2 access. Associate the contractor's IAM account with the IAM group.
• D) Create an IAM role that allows for EC2 and explicitly denies all other services. Instruct the contractor to always assume this role.

---

Definitions:

Horizontal Sum

In economics, the process of aggregating demand curves of different individuals to derive the market demand curve.

Inferior Good

A type of good whose demand decreases as consumers' income rises, contrary to what happens with normal goods.

Substitute Goods

Products or services that can be used in place of one another, where an increase in the price of one leads to an increase in demand for the other.

Complementary Goods

Goods that are often used together, where the use or value of one increases when used in conjunction with the other.