AWS Certified Cloud Practitioner — Question 707

Which AWS feature grants temporary access to specific AWS resources?

Answer options

• A. AWS IAM Access Analyzer
• B. Service control policies (SCPs)
• C. Access control lists (ACLs)
• D. IAM roles

Correct answer: D

Explanation

IAM roles provide temporary security credentials that expire after a set duration, making them ideal for granting short-term access to AWS resources. AWS IAM Access Analyzer is a tool for identifying public or cross-account access, while Service control policies (SCPs) and Access control lists (ACLs) define permission boundaries and resource access rules rather than issuing temporary credentials.