Bird
0
0

Given an IAM role with a policy allowing 'ec2:StartInstances' and 'ec2:StopInstances', what happens if a user assumes this role and tries to terminate an EC2 instance?

medium📝 Predict Output Q4 of 15
AWS - Identity and Access Management
Given an IAM role with a policy allowing 'ec2:StartInstances' and 'ec2:StopInstances', what happens if a user assumes this role and tries to terminate an EC2 instance?
AThe termination fails because 'ec2:TerminateInstances' is not allowed
BThe termination succeeds because the role has EC2 permissions
CThe termination succeeds only if the instance is stopped
DThe termination fails due to lack of network permissions
Step-by-Step Solution
Solution:

  1. Step 1: Analyze allowed actions in the policy

    The policy allows starting and stopping instances but does not include termination permission.

  2. Step 2: Understand effect of missing permissions

    Without explicit 'ec2:TerminateInstances' permission, termination attempts are denied.

  3. Final Answer:

    Termination fails due to missing permission -> Option A

  4. Quick Check:

    Missing permission = action denied [OK]
Quick Trick: Only allowed actions can be performed by a role [OK]
Common Mistakes:
MISTAKES
  • Assuming all EC2 actions are allowed if some are
  • Ignoring the need for explicit termination permission

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes
AWS CLI - Installing AWS CLI - Quiz 5medium AWS CLI - CLI output formats (json, table, text) - Quiz 9hard EC2 Fundamentals - Elastic IP addresses - Quiz 8hard Identity and Access Management - IAM roles concept - Quiz 4medium Identity and Access Management - IAM policies (JSON structure) - Quiz 3easy Identity and Access Management - IAM policies (JSON structure) - Quiz 12easy Identity and Access Management - Assuming roles for temporary access - Quiz 4medium S3 Fundamentals - Creating S3 buckets - Quiz 14medium Security Groups and Network ACLs - Security group as virtual firewall - Quiz 6medium VPC Fundamentals - Creating a custom VPC - Quiz 6medium