AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 194

Question

A company is reviewing its IAM policies. One policy written by the DevOps engineer has been flagged as too permissive. The policy is used by an AWS Lambda function that issues a stop command to Amazon EC2 instances tagged with Environment: NonProduction over the weekend. The current policy is: What changes should the engineer make to achieve a policy of least permission? (Choose three.)

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Change "Resource": "*"to "Resource": "arn:aws:ec2:*:*:instance/*" Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 194