DVA-C02 Question 153
Single answerA development team wants to create fine-grained access control for their application running on AWS. They are considering whether to use AWS managed policies or customer-managed policies. Which of the following statements is TRUE about the differences between these two types of policies?
- A
AWS managed policies can be customized to meet specific access requirements, while customer-managed policies cannot.
- B
Customer-managed policies provide more control and flexibility for defining permissions compared to AWS managed policies.
- C
AWS managed policies are automatically updated by AWS, but customer-managed policies require manual updates by the user.
- D
Customer-managed policies are only available for use within the account they are created in, while AWS managed policies can be shared across multiple accounts.
Show answer and explanation
Correct answer: B
Explanation
AWS managed policies are predefined by AWS, making them easy to use but less flexible. Customer-managed policies, on the other hand, provide the ability to define fine-grained permissions tailored to specific application requirements, offering more control and flexibility. This is a key distinction between the two types of policies.
- A. Incorrect.
Incorrect: AWS managed policies cannot be customized by users; they are predefined by AWS. Customer-managed policies can be customized to meet specific access requirements.
- B. Correct.
Correct: Customer-managed policies allow you to define and customize permissions to fit specific needs, whereas AWS managed policies are predefined and less flexible.
- C. Incorrect.
Incorrect: While it's true that AWS managed policies are updated by AWS, customer-managed policies being user-managed is not a distinguishing factor for this question's context.
- D. Incorrect.
Incorrect: AWS managed policies are indeed available across multiple accounts, but customer-managed policies being account-specific is not a primary differentiator here.