A company wants DevOps teams to create IAM roles, but no role may have administrative...

Vendor: Amazon Web Services
Product: SAA-C03
Update on: Apr 2, 2026
Questions: 758

Amazon Web Services SAA-C03 Question Answer

A company wants DevOps teams to create IAM roles, but no role may have administrative permissions.

Which solution will meet these requirements?

Use SCPs to deny AdministratorAccess policy usage.

Use SCPs to require a permissions boundary when creating IAM roles.

Allow all permissions and auto-delete noncompliant roles.

Attach restrictive permissions boundaries directly to IAM users.

Amazon Web Services SAA-C03 Summary

Price: $52.5 ~~$149.99~~