DOP-C02 Question 61

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  D is totally correct

• Chose D2

  https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-servicerole.html

• 4

  D is correct: Need to create a role for Cloud formation that has the required permissions. Then adding iam:PassRole permission to the dev IAM role to allow them to pass this role to CF A: no mention of creating the required permissions for ACF. Additionally, should not grant permissions for dev. B: grant full access is against the least privilege policy C: no mention of granting iam:PassRole permission to the dev