AWS Certified Cloud Practitioner (CLF-C02) — Question 342

A company wants to generate a list of IAM users. The company also wants to view the status of various credentials that are associated with the users, such as password, access keys, and multi-factor authentication (MFA) devices.

Which AWS service or feature will meet these requirements?

Answer options

• A. IAM credential report
• B. AWS IAM Identity Center (AWS Single Sign-On)
• C. AWS Identity and Access Management Access Analyzer
• D. AWS Cost and Usage Report

Correct answer: A

Explanation

The IAM credential report generates a downloadable CSV document listing all IAM users in an AWS account and the status of their credentials, including passwords, access keys, and MFA status. AWS IAM Identity Center is used for centralizing single sign-on access, while IAM Access Analyzer identifies resources shared with external entities. The AWS Cost and Usage Report contains comprehensive data about AWS costs and usage, which is unrelated to user credential auditing.