AWS Certified Cloud Practitioner (CLF-C02) — Question 477

A company wants to provide one of its employees with access to Amazon RDS. The company also wants to limit the interaction to only the AWS CLI and AWS software development kits (SDKs).

Which combination of actions should the company take to meet these requirements while following the principles of least privilege? (Choose two.)

Answer options

• A. Create an IAM user and provide AWS Management Console access only.
• B. Create an IAM user and provide programmatic access only.
• C. Create an IAM role and provide AWS Management Console access only.
• D. Create an IAM policy with administrator access and attach it to the IAM user.
• E. Create an IAM policy with Amazon RDS access and attach it to the IAM user.

Correct answer: B, E

Explanation

To restrict access to only the AWS CLI and SDKs, programmatic access must be enabled for the IAM user instead of console access. Additionally, the principle of least privilege dictates that the user should only be granted specific Amazon RDS permissions rather than full administrator access.