Amazon Exam DOP-C01 Topic 13 Question 15 Discussion

Actual exam question for Amazon's DOP-C01 exam

Question #: 15
Topic #: 13

A development team wants to deploy an application using AWS CloudFormation stacks, but the developer IAM role does not currently have the required permissions to provision the resources specified in the CloudFormation template. A DevOps engineer is tasked with allowing developers to deploy the stacks while following the principal of least privilege.

Which solution will meet these requirements?

ACreate an IAM policy that allows developers to provision the required resources. Attach the policy to the developer role.

BCreate an IAM policy that allows full access to CloudFormation. Attach the policy to the developer role.

CCreate a new IAM role with the required permissions to use as a CloudFormation service role. Grant the developer role a cloudformation:* action.

DCreate a new IAM role with the required permissions to use as a CloudFormation service role. Grant the developer role the iam:PassRole permission.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-servicerole.html

Show Suggested Answer

Suggested Answer: C

by Candida at May 04, 2022, 03:44 PM

Limited Time Offer

25%

Off

Get Premium DOP-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!