A Company Has Deployed an Application to Multiple Environments in AWS

question 176

Multiple Choice

A company has deployed an application to multiple environments in AWS, including production and testing. The company has separate accounts for production and testing, and users are allowed to create additional application users for team members or services, as needed. The Security team has asked the Operations team for better isolation between production and testing with centralized controls on security credentials and improved management of permissions between environments. Which of the following options would MOST securely accomplish this goal?

• A) Create a new AWS account to hold user and service accounts, such as an identity account. Create users and groups in the identity account. Create roles with appropriate permissions in the production and testing accounts. Add the identity account to the trust policies for the roles.
• B) Modify permissions in the production and testing accounts to limit creating new IAM users to members of the Operations team. Set a strong IAM password policy on each account. Create new IAM users and groups in each account to limit developer access to just the services required to complete their job function.
• C) Create a script that runs on each account that checks user accounts for adherence to a security policy. Disable any user or service accounts that do not comply.
• D) Create all user accounts in the production account. Create roles for access in the production account and testing accounts. Grant cross-account access from the production account to the testing account.

---

Definitions:

Positive Incentive Model

A theory suggesting that behaviors are motivated by the positive incentives or rewards that they are expected to bring, rather than by a desire to avoid negative outcomes.

Weight Control

The practice of maintaining a healthy body weight through a balanced diet and regular exercise.

Biologically Determined

Traits or characteristics that are influenced by genetic or physiological factors.

Body Mass Index

A measurement derived from a person's height and weight, used to categorize underweight, normal weight, overweight, and obesity.