Explanation:
Assuming a typical read-only policy or standard, EC2 DescribeInstances is commonly allowed. RDS Describe, S3 Put (write), and AttachNetworkInterface (modify) may not be if policy is limited to EC2 describe in specific region.
A company has attached an IAM policy to an IAM user. Which action is allowed?
A
Amazon RDS DescribeDBInstances in us-east-1.
B
Amazon S3 PutObject in a bucket named testbucket.
C
Amazon EC2 DescribeInstances in us-east-1.
D
Amazon EC2 AttachNetworkInterface in eu-west-1.
No comments yet.