Which of the following is the correct JSON syntax to explicitly deny the ec2:TerminateInstances action on all resources?

easy📝 Syntax Q3 of 15

AWS - Identity and Access Management

Which of the following is the correct JSON syntax to explicitly deny the ec2:TerminateInstances action on all resources?

A{"Effect": "Deny", "Action": "ec2:TerminateInstances", "Resource": "*"}

B{"Effect": "Allow", "Action": "ec2:TerminateInstances", "Resource": "*"}

C{"Effect": "Deny", "Action": ["ec2:TerminateInstances"]}

D{"Action": "ec2:TerminateInstances", "Resource": "*"}

Step-by-Step Solution

Solution:

Step 1: Check Effect and Action fields
Effect must be "Deny" and Action must specify "ec2:TerminateInstances".
Step 2: Validate Resource field
Resource "*" means all resources, which is correct here.
Final Answer:
Correct syntax with Effect Deny, Action string, and Resource * -> Option A
Quick Check:
Correct Deny syntax = {"Effect": "Deny", "Action": "ec2:TerminateInstances", "Resource": "*"} [OK]

Quick Trick: Effect Deny + Action + Resource * is correct deny syntax [OK]

Common Mistakes:

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

Want More Practice?

15+ quiz questions · All difficulty levels · Free

More AWS Quizzes