AWS Certified Cloud Practitioner (CLF-C02) — Question 649

In which situations should a company create an IAM user instead of an IAM role?

Answer options

• A. When an application that runs on Amazon EC2 instances requires access to other AWS services
• B. When the company creates AWS access credentials for individuals
• C. When the company creates an application that runs on a mobile phone that makes requests to AWS
• D. When the company needs to add users to IAM groups
• E. When users are authenticated in the corporate network and want to be able to use AWS without having to sign in a second time

Correct answer: B

Explanation

IAM users are designed to represent specific human individuals who require permanent, long-term AWS credentials. In contrast, IAM roles are meant for situations requiring temporary security credentials, such as granting permissions to applications on Amazon EC2, mobile apps, or federated corporate users.