
Ultimate access to all questions.
In a large AWS environment, how would you enforce proper separation of duties to minimize the risk of insider threats and ensure that no single individual has excessive control over critical resources?
A
Implement strict RBAC policies where each role is granted only the permissions necessary for their job function.
B
Use ABAC to dynamically adjust permissions based on user attributes and context, such as time of day and location.
C
Rotate all administrative roles frequently to prevent any single individual from gaining excessive control.
D
Combine RBAC with periodic security audits and mandatory vacations for all administrative staff.