Answer-first summary for fast verification
Answer: The request does not satisfy the IAM policy's condition.
The correct answer is D: 'The request does not satisfy the IAM policy's condition.' The 403 (Access Denied) error indicates that the IAM policy has conditions that are not met by the request. In this scenario, the IAM policy likely allows the 'ec2:TerminateInstances' action only if the request originates from specific CIDR blocks (192.0.2.0/24 or 203.0.113.0/24). Since the request does not satisfy this condition, it results in an 'Access Denied' error.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
Why did an administrator receive a 403 error when attempting to terminate an EC2 instance using AWS CLI with an IAM role?
A
The IAM policy lacks the 'ec2:TerminateInstances' permission.
B
The IAM role is not correctly assigned to the user.
C
The policy does not grant the required 'ec2:TerminateInstances' action.
D
The request does not satisfy the IAM policy's condition.
No comments yet.