AWS Certified Solutions Architect – Professional SAP-C01 – Question149

An organization (account ID 123412341234) has configured the IAM policy to allow the user to modify his credentials.
What will the below mentioned statement allow the user to perform?


A. Allow the IAM user to update the membership of the group called TestingGroup
B. The IAM policy will throw an error due to an invalid resource name
C. The IAM policy will allow the user to subscribe to any IAM group
D. Allow the IAM user to delete the TestingGroup

Correct Answer: A

Explanation:

Explanation: AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. If the organization (account ID 123412341234) wants their users to manage their subscription to the groups, they should create a relevant policy for that. The below mentioned policy allows the respective IAM user to update the membership of the group called MarketingGroup.
{
“Version”: “2012-10-17”,
“Statement”: [{
“Effect”: “Allow”,
“Action”: [ “iam:AddUserToGroup”, “iam:RemoveUserFromGroup”, “iam:GetGroup” ],
“Resource”: “arn:aws:iam:: 123412341234:group/ TestingGroup ”
}]
Reference:
http://docs.aws.amazon.com/IAM/latest/UserGuide/Credentials-Permiss…