Practice Test 3 | AWS Certified Solutions Architect Associate | SAA-C03 | Dumps | Mock Test
You have both production and development based instances running on your VPC. It is required to ensure that people responsible for the development instances do not have access to work on production instances for better security. Which of the following would be the best way to accomplish this using policies? Choose the correct answer from the options given below.
A. Launch the development and production instances in separate VPCs and use VPC Peering.
B. Create an IAM group with a condition that allows access to only those instances which are used for production or development.
C. Launch the development and production instances in different Availability Zones and use Multi-Factor Authentication.
D. Define the tags on the Development and production servers and add a condition to the IAMPolicy which allows access to specific tags.
Explanation:
Answer – D
You can easily add tags to define which instances are production and which ones are development instances. These tags can then be used while controlling access via an IAM Policy.
For more information on tagging your resources, please refer to the link below.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html
Note:
It can be done with the help of option B as well. However, the question is looking for the “best way to accomplish these using policies”.
By using the option D, you can reduce usage of different IAM policies on each instance.
Comments are closed, but trackbacks and pingbacks are open.