Skip to main content
CloudCertPrep

IAM Deep Dive

Policy evaluation, permission boundaries, federation, and cross-account access.

Domain 4: Identity and Access Management · 20% of exam · 3 questions

All practice topics →
Question 1 of 3
Domain 4: Identity and Access ManagementIAM Deep DivehardSingle choice

A platform team wants every developer to manage their own IAM roles, but no role a developer creates may exceed a defined permission ceiling. Which mechanism enforces this ceiling on self-service role creation?

Answer options