An AWS account owner has setup multiple IAM users.One of these IAM users, named John, has CloudWatch access, but no access to EC2 services.John has setup an alarm action which stops EC2 instances when their CPU utilization is below the threshold limit.
When an EC2 instance’s CPU Utilization rate drops below the threshold John has set, what will happen and why?
CloudWatch will stop the instance when the action is executed
Nothing will happen. John cannot set an alarm on EC2 since he does not have the permission.
Nothing will happen. John can setup the action, but it will not be executed because he does not have EC2 access through IAM policies.
Nothing will happen because it is not possible to stop the instance using the CloudWatch alarm
It appears that the answer is:
CloudWatch will stop the instance when the action is executed