An organization (account ID 123412341234) has configured the IAM policy to allow the user to
modify his credentials.
What will the below mentioned statement allow the user to perform?
{
“Version”: “2012-10-17”,
“Statement”: [{
“Effect”: “Allow”,
“Action”: [
“iam:AddUserToGroup”,
“iam:RemoveUserFromGroup”,
“iam:GetGroup”
],
“Resource”: “arn:aws:iam:: 123412341234:group/TestingGroup”
}
]
A.
Allow the IAM user to update the membership of the group called TestingGroup
B.
The IAM policy will throw an error due to an invalid resource name
C.
The IAM policy will allow the user to subscribe to any IAM group
D.
Allow the IAM user to delete the TestingGroup
Explanation:
AWS Identity and Access Management is a web service which allows organizations to manage
users and user permissions for various AWS services. If the organization (account ID
123412341234) wants their users to manage their subscription to the groups, they should create
a relevant policy for that. The below mentioned policy allows the respective IAM user to update
the membership of the group called MarketingGroup.
{
“Version”: “2012-10-17”,
“Statement”: [{
“Effect”: “Allow”,
“Action”: [
“iam:AddUserToGroup”,
“iam:RemoveUserFromGroup”,
“iam:GetGroup”
],
“Resource”: “arn:aws:iam:: 123412341234:group/ TestingGroup ” }]
http://docs.aws.amazon.com/IAM/latest/UserGuide/Credentials-Permissionsexamples.html#creds-polici es-credentials