DEA-C01 Question 444
Single answerA company is building a data pipeline in AWS. The Data Engineering team wants to assign IAM permissions to the pipeline's components. They are considering using either AWS managed policies or customer managed policies. Which of the following is true regarding the differences between these two types of IAM policies?
- A
AWS managed policies are created and maintained by AWS, while customer managed policies are created and managed by the customer.
- B
Customer managed policies are automatically updated by AWS to include new service features, while AWS managed policies require manual updates by the customer.
- C
AWS managed policies can only be used with AWS services, while customer managed policies can be used with both AWS services and on-premises applications.
- D
Customer managed policies provide full control over policy customizations, while AWS managed policies do not allow customization.
Show answer and explanation
Correct answer: A
Explanation
AWS managed policies are pre-created and maintained by AWS, providing convenience and automatic updates for general use cases. Customer managed policies, however, offer greater flexibility and allow organizations to define their own policies tailored to their specific access requirements, but they require manual management and updates. This distinction is key for choosing the right policy type based on your use case.
- A. Correct.
Correct. AWS managed policies are created and maintained by AWS, which makes them easy to use for general use cases. Customer managed policies, on the other hand, are created and managed by customers to meet specific requirements.
- B. Incorrect.
Incorrect. AWS managed policies are updated automatically by AWS to include new service features, while customer managed policies require manual updates by the customer if changes are needed.
- C. Incorrect.
Incorrect. Both AWS managed policies and customer managed policies can be used to control access to AWS services. However, neither is specifically tied to on-premises applications.
- D. Incorrect.
Incorrect. Customer managed policies allow full control over customizations, while AWS managed policies are predefined by AWS and do not allow customization.