AWS Solutions Architect Associate (SAA-C02) Exam Prep Course - 2021 UPDATED! - Multiple Permissions

The video tutorial explains how permissions in AWS are managed when they come from multiple sources, such as users and groups. It highlights that allow policies are cumulative, while deny policies override others. The concept of permission boundaries is introduced, which constrains the permissions a user can receive. Boundaries do not grant permissions but limit them to specific services. An example of a boundary policy in JSON format is provided, illustrating how it restricts actions to certain AWS services like S3, EC2, and CloudWatch.

What happens when a user receives permissions from both a user account and a group?

• Permissions are only granted from the group.

• Permissions are only granted from the user account.

• Allow policies are cumulative, while deny policies override.

• Permissions are averaged out.

What is the primary function of a permission boundary?

• To set limits on the permissions a user can receive.

• To grant additional permissions.

• To provide default permissions.

• To override all other permissions.

How do permission boundaries and policies interact?

• Policies override boundaries.

• Boundaries override all policies.

• Boundaries set limits, and policies grant permissions within those limits.

• They do not interact at all.

In the example boundary policy, which AWS services are included?

• CloudWatch, Lambda, S3

• S3, CloudWatch, EC2

• S3, RDS, EC2

• RDS, Lambda, DynamoDB

What analogy is used to explain permission boundaries?

• A fenced garden

• A city with walls

• A locked room

• A closed box

What does a boundary policy ensure in terms of permissions?

• It ensures permissions are denied.

• It ensures no permissions are granted.

• It ensures permissions are within a defined scope.

• It ensures all permissions are granted.

What is the default state of boundary policies in AWS?

• They are not present unless created.

• They allow all permissions by default.

• They are always present.

• They deny all permissions by default.