A Company Allows Its Developers to Attach Existing IAM Policies

question 223

Multiple Choice

A company allows its developers to attach existing IAM policies to existing IAM roles to enable faster experimentation and agility. However, the security operations team is concerned that the developers could attach the existing administrator policy, which would allow the developers to circumvent any other security policies. How should a solutions architect address this issue?

• A) Create an Amazon SNS topic to send an alert every time a developer creates a new policy.
• B) Use service control policies to disable IAM activity across all account in the organizational unit.
• C) Prevent the developers from attaching any policies and assign all IAM duties to the security operations team.
• D) Set an IAM permissions boundary on the developer IAM role that explicitly denies attaching the administrator policy.

---

Definitions:

Situational Variables

Factors or conditions present in the environment that can influence the outcome of a decision or action.

Leadership Behavior

The actions and conduct displayed by leaders, influencing the direction, efficiency, and performance of their teams or organizations.

Cross-cultural Research

is the examination of cultural differences and similarities, aiming to understand how diverse cultural contexts influence human behavior and societal structures.

Globalization

The process by which businesses or other organizations develop international influence or start operating on an international scale, breaking down geographical and economic barriers.