Answer-first summary for fast verification
Answer: Use a combination of ABAC and RBAC, with ABAC handling fine-grained access control and RBAC managing high-level roles.
A combination of ABAC and RBAC provides the flexibility needed for fine-grained access control while maintaining simplicity through role-based management. ABAC can handle specific access requirements based on attributes, while RBAC ensures that high-level roles are clearly defined and managed.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
You are tasked with evaluating IAM policy types for a new workload that requires fine-grained access control to various AWS services. The workload involves multiple teams with different roles and responsibilities. Which IAM policy type would you recommend to achieve the desired level of access control while maintaining simplicity and manageability?
A
Use only AWS Managed Policies, as they are maintained and updated by AWS, ensuring compatibility and security.
B
Create a mix of AWS Managed Policies and Customer Managed Policies, tailoring the latter to specific roles and responsibilities.
C
Implement only Customer Managed Policies, allowing for complete customization and control over access permissions.
D
Use a combination of ABAC and RBAC, with ABAC handling fine-grained access control and RBAC managing high-level roles.
No comments yet.