Permission Boundaries Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering IAM Policies and Permissions

What you'll be asked

  1. What is the primary purpose of an IAM permission boundary?
  2. If an IAM user has an identity-based policy allowing 's3:*' access but a permission boundary that only allows 's3:ListBucket', what is the effective permission?
  3. Which of the following statements is true regarding the relationship between Permission Boundaries and Service Control Policies (SCPs)?
  4. A developer needs to be able to create new IAM users but should not be able to grant them more permissions than they themselves possess. How can a permission boundary be used here?
  5. An IAM role has a permission boundary that allows 'ec2:DescribeInstances'. The role's identity-based policy allows 'ec2:*'. Additionally, an explicit 'Deny' is added to the identity-based policy for 'ec2:DescribeInstances'. What is the result?

Answers and explanations come after you submit.