Troubleshooting IAM Conflicts Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering IAM Policies and Permissions

What you'll be asked

  1. In AWS IAM, if a user has an Allow policy and a Deny policy applied to them for the same action, which one takes precedence?
  2. A developer is unable to access an S3 bucket despite having an IAM policy that grants 's3:ListBucket'. What is the most likely cause if no explicit deny exists?
  3. An IAM user is a member of two groups. Group A has a policy allowing access to DynamoDB, and Group B has a policy denying access to DynamoDB. What is the user's effective permission?
  4. You have an IAM user with a policy that allows 'ec2:StartInstances' for a specific instance ID. You also have a Service Control Policy (SCP) at the Organization level that denies 'ec2:StartInstances' for all users. Can the user start the instance?
  5. A user is assigned an IAM policy that allows 's3:*' and a Permission Boundary that only allows 's3:ListBucket'. When the user attempts to 's3:PutObject', what is the result?

Answers and explanations come after you submit.