What is the primary purpose of a permissions boundary for an IAM user or role?

ATo grant permissions directly to the IAM entity

BTo set the maximum permissions that identity-based policies can grant to the IAM entity

CTo replace all resource-based policies for the account

DTo make SCPs unnecessary

More Identity and Access Management Questions

40 questions

Full AWS Certified Security - Specialty Practice Test

All topics covered

All AWS Certified Security - Specialty Questions

Browse by topic

Related Questions

Which statement about temporary security credentials from AWS STS is correct?...

easy

A company wants one place to assign permissions to groups of workforce users across multiple AWS acc...

easy

A security team wants to identify Amazon S3 buckets and IAM roles in its organization that are share...

medium

A company enabled an external access analyzer in one AWS Region and expects it to monitor all suppor...

medium

A platform team wants to generate least-privilege IAM policies based on access activity that has alr...

medium

View all Identity and Access Management questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.