ACloud Guru Certified Cloud Practitioner Practice Exam

Which AWS service allows grouping users and applying permissions to them as a group?

1. Tagging

2. AWS IAM

3. AWS Organizations

4. Resource Group

The correct answer is: AWS IAM

The correct answer is AWS IAM (Identity and Access Management). This service enables users to manage access to AWS services and resources securely. IAM provides the capability to create user groups, define permissions for these groups, and manage the access rights of all users within the group. This grouping allows for more efficient management of permissions, as you can apply policies to the group as a whole rather than having to assign permissions individually to each user. In IAM, you can define policies using JSON that specify who can access what resources and under what conditions. By managing permissions at the group level, it simplifies the administration of access controls and ensures compliance with organizational security policies. While tagging, AWS Organizations, and Resource Groups serve important functions, they do not directly provide the functionality of grouping users and managing permissions. Tagging is primarily used for categorizing resources, AWS Organizations helps in managing multiple AWS accounts, and Resource Groups are used for organizing and managing AWS resources based on specific criteria. None of these services directly focus on user and permission management in the same way that AWS IAM does.