Exit DOP-C02 AWS Certified DevOps Engineer - Professional (DOP-C02)
Question 3 of 5
0% complete
Q3 Multiple choice

A company is reviewing its IAM policies. One policy written by the DevOps engineer has been flagged as too permissive. The policy is used by an AWS Lambda function that issues a stop command to Amazon EC2 instances tagged with Environment: NonProduction over the weekend. The current policy is:

What changes should the engineer make to achieve a policy of least permission? (Choose three.)

Select all that apply.

  • A

    Option A

  • B

    Option B

  • C

    Option C

  • D

    Option D

  • E

    Option E

  • F

    Option F