Security & ComplianceQuestion 27 of 100
Which AWS service is used to create users, groups, and roles and to control their permissions to AWS resources?
a.Amazon Cognito
b.AWS Identity and Access Management (IAM)
c.AWS Shield
d.Amazon Macie
Explanation
IAM lets you manage authentication and authorization for AWS by creating users, groups, and roles and attaching policies that grant or deny access. It is the primary service for controlling who can do what in an account.
Practice all 100 questions free — no signup required.
Related questions on this topic
- Under the AWS shared responsibility model, which of the following is AWS responsible for?
- Under the shared responsibility model, which task is the customer responsible for?
- What is the AWS best practice for the root user of an AWS account?
- Which security measure adds a second form of verification, such as a code from a device, when signing in to AWS?
- An application running on an EC2 instance needs to read objects from an S3 bucket. What is the recommended way to grant this access?
- Which principle recommends granting users only the permissions they need to perform their tasks and nothing more?
Last reviewed: · editorial process
PrepPass Editorial Team · Verified against AWS Certified Cloud Practitioner (CLF-C02) · How we review