Skip to content
SCS-C03
Identity and Access Management
hard
Question 4 of 40

A team attaches a resource-based policy statement that uses NotPrincipal with Deny to a resource. Some IAM roles with permissions boundaries unexpectedly lose access. According to AWS guidance, what should the team do?

AReplace the statement with ArnNotEquals on the aws:PrincipalArn condition key
BRemove the permissions boundaries from all roles
CConvert the resource-based policy into an SCP
DUse only inline policies on the roles

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion