Skip to content
DOP-C02
Configuration Management and IaC
hard
Question 4 of 37

A role has an identity-based policy that allows IAM administration, but the same role also has a permissions boundary that allows only Amazon S3, CloudWatch, and Amazon EC2 actions. What is the result?

AThe role can administer IAM because identity-based policies always override boundaries
BThe role can use only actions allowed by both the identity-based policy and the permissions boundary
CThe role loses all permissions because boundaries disable identity-based policies
DThe role gains the union of both policy documents

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion