AWS Certified Cloud Practitioner — Question 342

A company is configuring its AWS Cloud environment. The company's administrators need to group users together and apply permissions to the group.

Which AWS service or feature can the company use to meet these requirements?

Answer options

• A. AWS Organizations
• B. Resource groups
• C. Resource tagging
• D. AWS Identity and Access Management (IAM)

Correct answer: D

Explanation

AWS Identity and Access Management (IAM) allows administrators to create IAM user groups and attach permission policies to them, simplifying access management for multiple users. AWS Organizations is used for central management of multiple AWS accounts rather than individual users, while Resource groups and Resource tagging are used to organize and manage AWS resources rather than user access permissions.