AWS Certified Cloud Practitioner (CLF-C02) — Question 699

Which AWS service can manage permissions for AWS resources by using policies?

Answer options

• A. Amazon Inspector
• B. Amazon Detective
• C. AWS Identity and Access Management (IAM)
• D. Amazon GuardDuty

Correct answer: C

Explanation

AWS Identity and Access Management (IAM) is the core service used to define and manage permissions for AWS resources using identity-based or resource-based policies. Amazon Inspector, Amazon Detective, and Amazon GuardDuty are security assessment, investigation, and monitoring services, respectively, and do not manage resource permissions.