AWS - Account and Billing
You want to restrict an IAM user from accessing billing but allow full access to all other services. What should you do?
You want to restrict an IAM user from accessing billing but allow full access to all other services. What should you do?
hard📝 Application Q8 of 15
Step-by-Step Solution
Solution:
Step 1: Understand permission control via policies
You can explicitly deny billing access in an IAM policy attached to the user.Step 2: Avoid root user misuse
Root user cannot be used to block IAM user permissions; policies control access.Step 3: Confirm correct approach
Explicit deny overrides allow, so attaching a deny billing policy works.Final Answer:
Attach a policy denying billing access explicitly to the IAM user -> Option BQuick Check:
Explicit deny policy restricts billing [OK]
Quick Trick: Use explicit deny policies to block billing access [OK]
Common Mistakes:
MISTAKES- Trying to block billing via root user
- Deleting IAM user unnecessarily
- Giving full admin permissions without restrictions
Master "Account and Billing" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes