CLF-C02 Question 97
Select 3A company wants to control access to its AWS resources. Which of the following AWS access management capabilities can the company use to manage and enforce permissions?
- A
AWS Identity and Access Management (IAM) policies
- B
Amazon CloudFront distributions
- C
AWS Organizations service control policies (SCPs)
- D
IAM roles and permissions boundaries
- E
AWS Elastic Load Balancing (ELB)
Show answer and explanation
Correct answers: A, C, D
Explanation
AWS access management capabilities include tools such as IAM policies, roles, permissions boundaries, and service control policies (SCPs). These tools are designed to define, enforce, and manage access to AWS resources securely. Other services like CloudFront and ELB are not directly related to access management capabilities.
- A. Correct.
IAM policies are the primary method to define and enforce permissions for users, groups, and roles within AWS.
- B. Incorrect.
Amazon CloudFront distributions are used for delivering content globally with low latency, but they are not related to access management capabilities.
- C. Correct.
Service control policies (SCPs) in AWS Organizations are used to define and enforce permission boundaries across multiple accounts in an AWS Organization.
- D. Correct.
IAM roles and permissions boundaries allow fine-grained control over what actions a resource or user can perform, making them a key part of access management.
- E. Incorrect.
AWS Elastic Load Balancing (ELB) is a service used to distribute incoming traffic to multiple targets, but it is not related to managing permissions or access control.