[Solved] Given this IAM policy snippet, what permissions does the user effectively have?{ "Effect": "Allow", "Action": ["ec2:StopInstances"], "Resource":... | AWS

AWS - Identity and Access Management

Given this IAM policy snippet, what permissions does the user effectively have?

{
  "Effect": "Allow",
  "Action": ["ec2:StopInstances"],
  "Resource": ["arn:aws:ec2:us-west-2:123456789012:instance/i-1234567890abcdef0"]
}

AUser can stop any EC2 instance in any region

BUser can start and stop all EC2 instances in the account

CUser can stop only the specified EC2 instance

DUser can start the specified EC2 instance

Step-by-Step Solution

Solution:

Step 1: Analyze Effect and Action
Effect is Allow for action ec2:StopInstances only.
Step 2: Analyze Resource
Resource is a specific EC2 instance ARN.
Step 3: Determine effective permission
User can stop only that specific instance, no other actions allowed.
Final Answer:
User can stop only the specified EC2 instance -> Option C
Quick Check:
Action and resource match specific stop permission [OK]

Quick Trick: Action and resource define exact allowed operation [OK]

Common Mistakes:

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

Given this IAM policy snippet, what permissions does the user effectively have?