AWS - Identity and Access Management
You want to enforce MFA for all IAM users before they can delete any S3 bucket. Which policy condition is best to achieve this?
You want to enforce MFA for all IAM users before they can delete any S3 bucket. Which policy condition is best to achieve this?
hard📝 Application Q8 of 15
Step-by-Step Solution
Solution:
Step 1: Identify MFA enforcement condition
The condition 'aws:MultiFactorAuthPresent' set to true requires MFA authentication.Step 2: Apply condition to delete actions
Using this condition in a policy restricts delete actions unless MFA is used.Final Answer:
Condition requiring MFA present (true) -> Option CQuick Check:
MFA required = B [OK]
Quick Trick: Use aws:MultiFactorAuthPresent = true to enforce MFA [OK]
Common Mistakes:
- Using IP address or region conditions incorrectly
- Setting MFA condition to false
- Ignoring MFA enforcement in policies
Master "Identity and Access Management" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes