A Company Has Deployed an Application to Multiple Environments in AWS

question 176

Multiple Choice

A company has deployed an application to multiple environments in AWS, including production and testing. The company has separate accounts for production and testing, and users are allowed to create additional application users for team members or services, as needed. The Security team has asked the Operations team for better isolation between production and testing with centralized controls on security credentials and improved management of permissions between environments. Which of the following options would MOST securely accomplish this goal?

• A) Create a new AWS account to hold user and service accounts, such as an identity account. Create users and groups in the identity account. Create roles with appropriate permissions in the production and testing accounts. Add the identity account to the trust policies for the roles.
• B) Modify permissions in the production and testing accounts to limit creating new IAM users to members of the Operations team. Set a strong IAM password policy on each account. Create new IAM users and groups in each account to limit developer access to just the services required to complete their job function.
• C) Create a script that runs on each account that checks user accounts for adherence to a security policy. Disable any user or service accounts that do not comply.
• D) Create all user accounts in the production account. Create roles for access in the production account and testing accounts. Grant cross-account access from the production account to the testing account.

---

Definitions:

Complement of Event

In probability theory, the set of all outcomes in the sample space that are not included in the given event, essentially representing the opposite of the event.

Probability

A quantification of an event's chance of happening, displayed as a figure between 0 and 1, where 0 denotes that the event is impossible and 1 denotes absolute certainty of the event occurring.

Occurs

Takes place or happens, often used in the context of events or phenomena that are observed.

Plastic Arrow

A type of arrow made primarily of plastic, typically used for archery training or as a toy.