DEA-C01 Question 443
Select 2A data engineering team is setting up access to an Amazon S3 bucket that stores sensitive data. They want to apply a least-privilege access policy. The team is debating whether to use an AWS managed policy or create a customer managed policy. Which of the following statements correctly describes the difference between AWS managed policies and customer managed policies?
- A
AWS managed policies are created and maintained by AWS, whereas customer managed policies are created and managed by users.
- B
AWS managed policies allow fine-grained control over permissions compared to customer managed policies.
- C
Customer managed policies can be tailored to specific business needs, whereas AWS managed policies cannot be modified.
- D
Customer managed policies are automatically updated by AWS, ensuring they always follow best practices.
Show answer and explanation
Correct answers: A, C
Explanation
AWS managed policies are pre-built, general-purpose policies maintained by AWS, designed to simplify access management for common use cases. However, they cannot be customized. Customer managed policies are user-created and allow for fine-grained, specific access control, making them ideal for scenarios like implementing least-privilege access. AWS managed policies are updated automatically by AWS, but customer managed policies require manual updates and maintenance by the user.
- A. Correct.
Correct: AWS managed policies are pre-built policies provided and maintained by AWS to simplify access management. Customer managed policies, on the other hand, are created by users for specific use cases.
- B. Incorrect.
Incorrect: AWS managed policies are general-purpose and designed for common use cases, while customer managed policies provide more fine-grained control over permissions.
- C. Correct.
Correct: Customer managed policies are fully customizable, allowing users to tailor them to meet specific business requirements. AWS managed policies cannot be modified by users.
- D. Incorrect.
Incorrect: AWS managed policies are updated by AWS to incorporate best practices, but customer managed policies are the responsibility of the user to maintain and update.