A company wants DevOps teams to create IAM roles, but no role may have administrative...

Amazon Web Services SAA-C03 Question Answer

A company wants DevOps teams to create IAM roles, but no role may have administrative permissions.

Which solution will meet these requirements?

Use SCPs to deny AdministratorAccess policy usage.

Use SCPs to require a permissions boundary when creating IAM roles.

Allow all permissions and auto-delete noncompliant roles.

Attach restrictive permissions boundaries directly to IAM users.

SAA-C03 PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"