[Solved] An IAM user has this policy:{ "Effect": "Allow", "Action": ["rds:DeleteDBInstance"], "Resource": ["*"] }What is the least privilege concern here? | AWS

AWS - Identity and Access Management

An IAM user has this policy:

{
  "Effect": "Allow",
  "Action": ["rds:DeleteDBInstance"],
  "Resource": ["*"]
}

What is the least privilege concern here?

AThe policy allows deleting any RDS instance without resource restriction

BThe policy denies deleting any RDS instance

CThe policy restricts deletion to a specific RDS instance only

DThe policy allows only read access to RDS instances

Step-by-Step Solution

Solution:

Step 1: Review Action and Resource
Action is DeleteDBInstance with Resource set to '*', meaning all instances.
Step 2: Identify least privilege issue
Allowing delete on all resources is excessive and risky.
Final Answer:
The policy allows deleting any RDS instance without resource restriction -> Option A
Quick Check:
Wildcard resource for destructive action violates least privilege [OK]

Quick Trick: Wildcard resource for destructive action violates least privilege [OK]

Common Mistakes:

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

An IAM user has this policy: