A Company Allows Its Developers to Attach Existing IAM Policies

question 223

Multiple Choice

A company allows its developers to attach existing IAM policies to existing IAM roles to enable faster experimentation and agility. However, the security operations team is concerned that the developers could attach the existing administrator policy, which would allow the developers to circumvent any other security policies. How should a solutions architect address this issue?

• A) Create an Amazon SNS topic to send an alert every time a developer creates a new policy.
• B) Use service control policies to disable IAM activity across all account in the organizational unit.
• C) Prevent the developers from attaching any policies and assign all IAM duties to the security operations team.
• D) Set an IAM permissions boundary on the developer IAM role that explicitly denies attaching the administrator policy.

---

Definitions:

Branding

The process of creating a unique name, design, and image for a product in the consumer's mind, mainly through advertising campaigns with a consistent theme.

360-degree Feedback

A performance appraisal method where an employee receives anonymous feedback from all directions – supervisors, peers, subordinates, and sometimes external parties like clients.

Employee Development

The continuous effort to improve employee skills and competencies through training and career opportunities, enhancing both individual and organizational performance.

Salary Determination

Refers to the process by which the compensation levels for job positions within an organization are set, based on factors like market rates, experience, skills, and organizational budgets.