AWS Certified Security - Specialty
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
A company is implementing a new AWS environment and requires an authorization strategy that supports both internal employees and external contractors. The authorization requirements for these two groups differ significantly, with internal employees needing broader access and contractors requiring more restrictive access. How would you design an authorization strategy that accommodates these differing requirements while maintaining security and compliance?
A
Use AWS Managed Policies for both groups, with more restrictive policies for contractors and broader policies for employees.
B
Create custom IAM roles with specific permissions for each group based on their access requirements.
C
Implement a hybrid approach using both RBAC and ABAC, with RBAC defining high-level roles and ABAC handling fine-grained access control based on attributes such as group membership.
D
Rotate IAM credentials frequently for contractors to minimize the risk of unauthorized access.