[Solved] You have two IAM groups: Developers with permission to deploy Lambda functions, and Auditors with read-only access.... What is the user's effective permission to deploy Lambda functions? | AWS

AWS - Identity and Access Management

You have two IAM groups: Developers with permission to deploy Lambda functions, and Auditors with read-only access. A user belongs to both groups. What is the user's effective permission to deploy Lambda functions?

AThe user must switch groups to deploy

BThe user cannot deploy Lambda functions

CThe user can deploy only if explicitly allowed in user policy

DThe user can deploy Lambda functions

Step-by-Step Solution

Solution:

Step 1: Understand combined group permissions
Permissions from all groups a user belongs to are combined.
Step 2: Apply to Lambda deploy permission
Developer group grants deploy permission, so user inherits it despite Auditor group.
Final Answer:
The user can deploy Lambda functions -> Option D
Quick Check:
Multiple group permissions combine = allowed if any allow [OK]

Quick Trick: User permissions combine from all groups [OK]

Common Mistakes:

Assuming conflicting groups block permissions
Thinking user must switch groups
Believing user policy is always required

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

Learn Why Deep Visual Try Challenge Project Recall Time

More AWS Quizzes

What is the user's effective permission to deploy Lambda functions?

Step 1: Understand combined group permissions

Step 2: Apply to Lambda deploy permission

Final Answer:

Quick Check:

Want More Practice?