AWS Certified Cloud Practitioner — Question 861

Which AWS service can a company use to control permissions to AWS services in the cloud?

Answer options

• A. Amazon EC2
• B. AWS Lambda
• C. Amazon Elastic Container Service (Amazon ECS)
• D. AWS Identity and Access Management (IAM)

Correct answer: D

Explanation

AWS Identity and Access Management (IAM) is the primary service designed to securely manage and control access to AWS resources and APIs. Other services like Amazon EC2, AWS Lambda, and Amazon ECS are compute services and do not handle global permission management for the AWS environment.