AWS Certified Cloud Practitioner (CLF-C02) — Question 524

A company wants to organize its users so that the company can grant permissions to the users as a group.

Which AWS service or tool can the company use to meet this requirement?

Answer options

• A. Security groups
• B. AWS Identity and Access Management (IAM)
• C. Resource groups
• D. AWS Security Hub

Correct answer: B

Explanation

AWS Identity and Access Management (IAM) allows you to create IAM user groups, enabling you to specify permissions for a collection of users to simplify access management. Security groups function as virtual firewalls for EC2 instances, Resource groups are used to organize and manage AWS resources, and AWS Security Hub provides a comprehensive view of security alerts, making B the only correct choice for managing user permissions.