Permission Boundaries Quiz

5 questions • Pass: 70% • +25 pts

Quiz covering IAM Policies and Permissions

Permission Boundaries Quiz

5 questions | Pass: 70% | Earn 25 points

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

  1. 1

    What is the primary purpose of an IAM permission boundary?

  2. 2

    If an IAM user has an identity-based policy allowing 's3:*' access but a permission boundary that only allows 's3:ListBucket', what is the effective permission?

  3. 3

    Which of the following statements is true regarding the relationship between Permission Boundaries and Service Control Policies (SCPs)?

  4. 4

    A developer needs to be able to create new IAM users but should not be able to grant them more permissions than they themselves possess. How can a permission boundary be used here?

  5. 5

    An IAM role has a permission boundary that allows 'ec2:DescribeInstances'. The role's identity-based policy allows 'ec2:*'. Additionally, an explicit 'Deny' is added to the identity-based policy for 'ec2:DescribeInstances'. What is the result?