medium10 pts · first answer countscloud-securityiam-roles

What a session policy does

An application calls sts:AssumeRole and passes an inline session policy that allows only s3:GetObject on one prefix. The role itself allows s3:*. What can the session do?

A.All S3 actions, since the role policy is broaderB.s3:* plus GetObject, because the policies add togetherC.Nothing until an administrator approves the session policyD.Only s3:GetObject on that prefix

Discussion 0

Join free to post in the discussion.

What a session policy does

Discussion 0

Related questions