A company has created a separate AWS account for all development work to protect the production environment. In this development account, developers have permission to manipulate IAM policies and roles. Corporate policies require that developers are blocked from accessing some services. What is the BEST way to grant the developers privileges in the development account while still complying with corporate policies?

Topic #: - All AWS-SysOps Questions

A. Create a service control policy in AWS Organizations and apply it to the development account.
B. Create a customer managed policy in IAM and apply it to all users within the development account.
C. Create a job function policy in IAM and apply it to all users within the development account.
D. Create an IAM policy and apply it in API Gateway to restrict the development account.

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Suggested Answer:

Share this post

Join the Discussion