IAM Quiz
You have both production and development based instances running on your VPC. It is required to ensure that people responsible for the development instances do not have access to work on production instances for better security. Which of the following would be the best way to accomplish this using policies? Choose the correct answer from the options given below.
A.
Launch the test and production instances in separate VPCs and use VPC Peering.
B.
Create an IAM Policy with a condition that allows access to only those instances which are used for production or development.
C.
Launch the test and production instances in different Availability Zones and use Multi-Factor Authentication.
D.
Define the tags on the test and production servers and add a condition to the IAMPolicy which allows access to specific tags.
D. Define the tags on the test and production servers and add a condition to the IAMPolicy which allows access to specific tags.
You can easily add tags to define which instances are production and which ones are development instances. These tags can then be used while controlling access via an IAM Policy.
For more information on tagging your resources, please refer to the link below.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html
