Authentication and Authorization

Correct Answer: Apply an IAM policy

Applying an IAM policy to the IAM group allows you to specify the exact AWS services and actions that the group members are allowed to perform. Custom IAM roles, enabling AWS Organizations, VPC peering, resource tags, and Amazon EventBridge do not restrict access to specific AWS services.

Correct Answer: Create an IAM policy and attach it to a group

Creating an IAM policy that grants read-only access to the specified S3 buckets and attaching the policy to a group is the most efficient method since you only need to manage one policy. Other options involve creating policies or configurations for each user, which is not efficient.

Correct Answer: AWS Identity and Access Management (IAM)

AWS Identity and Access Management (IAM) provides the account password policy that applies to IAM users, allowing you to enforce requirements such as minimum length, character complexity, password expiration, and prevention of password reuse. Amazon Cognito manages credentials for application end users, not IAM users. AWS Single Sign-On (IAM Identity Center) handles federated access and does not control IAM user password policies. AWS Organizations manages multiple AWS accounts and does not configure IAM user password policies.