Questão 3 — AWS DOP-C02 Practice Exam — Simulado AWS Certified DevOps Engineer Professional
A company is reviewing its 1AM policies. One policy written by the DevOps engineer has been (lagged as too permissive. The policy is used by an AWS Lambda function that issues a stop command to Amazon EC2 instances tagged with Environment: NonProduccion over the weekend. The current policy is: What changes should the engineer make to achieve a policy ot least permission? (Select THREE.)
- A. Option A
- B. option B
- C. option C
- D. option D
- E. Option E
- F. Option F
Resposta correta:
A, B, D
Explicação
Explanation: The engineer should make the following changes to achieve a policy of least permission: A: Add a condition to ensure that the principal making the request is an AWS Lambda function. This ensures that only Lambda functions can execute this policy. B: Narrow down the resources by specifying the ARN of EC2 instances instead of allowing all resources. This ensures that the policy only affects EC2 instances. D: Add a condition to ensure that this policy only applies to EC2 instances tagged with "Environment: NonProduction". This ensures that production environments are not affected by this policy. : AWS Identity and Access Management (IAM) - AWS Documentation Certified DevOps Engineer - Professional (DOP-C02) Study Guide (page 179)
Quer todas as 449 questões por R$ 198,00?