AWS SAP-C02 · Question 44 · Domain 3.2: Security Improvement
A security audit reveals that IAM users have overly permissive policies. The security team wants to automatically analyze CloudTrail logs to generate least-privilege IAM policies based on actual usage over the last 90 days. Which tool should they use?
Answer options:
AWS Trusted Advisor
IAM Access Analyzer policy generation
AWS Config
Amazon Macie
75 questions · hints · full answers · grading
Expert