AWS - Identity and Access Management
If an IAM role's trust policy allows "arn:aws:iam::123456789012:user/Alice" as Principal, who can assume this role?
If an IAM role's trust policy allows "arn:aws:iam::123456789012:user/Alice" as Principal, who can assume this role?
medium📝 Predict Output Q5 of 15
Step-by-Step Solution
Solution:
Step 1: Understand ARN specificity
The ARN specifies a single IAM user named Alice in account 123456789012.Step 2: Match Principal to allowed entity
Only that specific user can assume the role, not all users or root.Final Answer:
The IAM user Alice in account 123456789012 -> Option BQuick Check:
Principal ARN specifies exact user allowed [OK]
Quick Trick: Principal ARN targets specific user or entity [OK]
Common Mistakes:
MISTAKES- Assuming all users in account can assume role
- Confusing user name with account-wide permission
- Thinking root user is included
Master "Identity and Access Management" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes