AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 221

Question

A company’s application currently uses an IAM role that allows all access to all AWS services. A SysOps administrator must ensure that the company’s IAM policies allow only the permissions that the application requires. How can the SysOps administrator create a policy to meet this requirement?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Turn on AWS CloudTrail. Generate a policy by using AWS Identity and Access Management Access Analyzer. AWS CloudTrail records API activity for auditing and governance.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 221