SAA-C03 Q532 · IAM

Question

A company is designing a microservice-based architecture for a new application on AWS. Each microservice will run on its own set of Amazon EC2 instances. Each microservice will need to interact with multiple AWS services. The company wants to manage permissions for each EC2 instance according to the principle of least privilege. Which solution will meet this requirement with the LEAST administrative overhead?

Accepted Answer

**Answer D** meets both requirements — **least privilege** and **least administrative overhead** — through the following logic:

1. **Least Privilege**: Each microservice has different responsibilities and needs access to different AWS services. By creating **individual IAM roles** tailored to each microservice's specific needs, you grant only the exact permissions required — no more, no less.

2. **Instance Profiles**: An **instance profile** is the mechanism that allows an EC2 instance to assume an IAM role. AWS automatically manages temporary credentials and rotates them. No access keys need to be stored or managed.

3. **Low Administrative Overhead**: Creating one IAM role per microservice is a straightforward, standard AWS practice. Once the role is created and attached via an instanc

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

🔒 Security

🎯 Exam Tips