SAA-C03 Q504 · IAM

Question

A company needs to grant a team of developers access to the company's AWS resources. The company must maintain a high level of security for the resources. The company requires an access control solution that will prevent unauthorized access to the sensitive data. Which solution will meet these requirements?

Accepted Answer

Option B is correct because it satisfies every requirement in the question:

1. **Granting developer access**: IAM roles can be assigned to developers, allowing them to assume the role and gain temporary credentials to access AWS resources.

2. **High level of security**: IAM roles provide **temporary security credentials** (via STS AssumeRole), which automatically expire. This is inherently more secure than long-lived credentials like access keys or shared passwords.

3. **Preventing unauthorized access to sensitive data**: **Fine-grained permissions based on the principle of least privilege** means each role grants only the exact permissions needed — no more, no less. This minimizes the blast radius if credentials are compromised and prevents developers from accessing data they don't nee

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

⚙️ Operations

🔒 Security

🎯 Exam Tips