Which solution will meet these requirements?
Attach the AdministratorAccess resource-based policy to the IAM user group. Place each of the five designated employee IAM users in the IAM user group.
Attach the SystemAdministrator identity-based policy to the IAM user group. Place each of the five designated employee IAM users in the IAM user group.
Attach the AdministratorAccess identity-based policy to the IAM user group. Place each of the five designated employee IAM users in the IAM user group.
Attach the SystemAdministrator resource-based policy to the IAM user group. Place each of the five designated employee IAM users in the IAM user group.
Explanations:
Resource-based policies are attached to resources, not groups or users. The correct policy type is identity-based.
The SystemAdministrator policy is not a valid managed AWS policy, and does not provide full administrative access.
The AdministratorAccess identity-based policy grants full access to all AWS services and resources, and attaching it to the IAM user group provides the intended permissions.
Similar to option A, resource-based policies cannot be used in this context for user groups.
I categorize that the answer is:
Attach the AdministratorAccess identity-based policy to the IAM user group. Place each of the five designated employee IAM users in the IAM user group.
From what I’ve heard, the answer is:
Attach the AdministratorAccess identity-based policy to the IAM user group. Place each of the five designated employee IAM users in the IAM user group.