Multi-Account Security Quiz

What you'll be asked

1. Which principle suggests that users should be granted only the minimum levels of access necessary to perform their job functions?
2. In a multi-account environment, what is the recommended primary method for managing access across different accounts without creating individual IAM users in each account?
3. When using an Organization-wide Service Control Policy (SCP), what happens if an administrator attaches a policy that denies access to 'S3:DeleteBucket' to an account?
4. What is the primary security risk of using long-term IAM user access keys for automated tasks in a multi-account environment?
5. An application in 'Account A' needs to access an encrypted S3 bucket in 'Account B'. Which combination of permissions is required for the application to successfully read the object?

Answers and explanations come after you submit.