Tag: Question 325

AWS Certified Advanced Networking – Specialty ANS-C00 – Question325

In the context of Amazon CloudFront Actions, you use the _____ when specifying APIs in IAM policies.

A. object names
B. class names
C. entity names
D. action names

Correct Answer: D

Explanation:

Explanation: In an AWS IAM policy, you can specify any and all API actions that Amazon CloudFront offers. The action name must be prefixed with the lowercase string cloudfront. For example:
cloudfront:GetDistributionConfig cloudfront:ListInvalidations cloudfront:* (for all CloudFront actions).
In the reference link, there are tables that list the canonical names for all CloudFront actions. Use these canonical names when specifying APIs in IAM policies.
Reference: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/UsingWithIAM.html