DVA-C02 Question 155
Single answerYour development team needs to grant permissions to an AWS Lambda function to access an S3 bucket. The team is debating whether to use an AWS managed policy or create a customer-managed policy. Which of the following statements about AWS managed policies and customer-managed policies is correct?
- A
AWS managed policies are maintained by AWS and cannot be modified by customers.
- B
Customer-managed policies are pre-defined by AWS and automatically updated to include new AWS services.
- C
AWS managed policies allow for fine-grained control and customization to meet specific business needs.
- D
Customer-managed policies are automatically audited and updated by AWS for security and best practices.
Show answer and explanation
Correct answer: A
Explanation
AWS managed policies are created and maintained by AWS to provide permissions for common use cases, and they cannot be modified by customers. In contrast, customer-managed policies are fully customizable and allow for fine-grained control over permissions, but customers are responsible for maintaining them. This makes AWS managed policies simpler to use but less flexible compared to customer-managed policies.
- A. Correct.
Correct. AWS managed policies are pre-created and maintained by AWS, and customers cannot modify them. They are designed for general use cases and updated by AWS as needed.
- B. Incorrect.
Incorrect. Customer-managed policies are created and fully controlled by customers, not AWS. Customers can define permissions specific to their needs but must manually update them as needed.
- C. Incorrect.
Incorrect. AWS managed policies provide general permissions for common use cases but do not allow customization. For fine-grained control, customer-managed policies should be used.
- D. Incorrect.
Incorrect. Customer-managed policies are not automatically audited or updated by AWS. Customers are responsible for maintaining and reviewing them for security and compliance.