A company’s security engineer has been tasked with restricting a contractor’s IAM account access to the company’s Amazon EC2 console without providing access to any other IAM services The contractors IAM account must not be able to gain access to any other IAM service, even it the IAM account rs assigned additional permissions based on IAM group membership

A company’s security engineer has been tasked with restricting a contractor’s IAM account access to the company’s Amazon EC2 console without providing access to any other IAM services The contractors IAM account must not be able to gain access to any other IAM service, even it the IAM account rs assigned additional permissions based on IAM group membership

What should the security engineer do to meet these requirements”
A . Create an mime IAM user policy that allows for Amazon EC2 access for the contractor’s IAM user
B . Create an IAM permissions boundary policy that allows Amazon EC2 access Associate the contractor’s IAM account with the IAM permissions boundary policy
C . Create an IAM group with an attached policy that allows for Amazon EC2 access Associate the contractor’s IAM account with the IAM group
D . Create a IAM role that allows for EC2 and explicitly denies all other services Instruct the contractor to always assume this role

View Answer

Answer: B