Home › AWS SysOps Associate › cloudcomputing › sysopssecuritynetwork › Which AWS service tests an IAM policy against a …
Which AWS service tests an IAM policy against a hypothetical request and explains which statement allowed or denied access?
AAmazon Comprehend
BIAM Policy Simulator
CCost Explorer
DAWS Snowball
Answer & Solution
Correct answer: B. IAM Policy Simulator
Policy Simulator evaluates IAM policies for a given principal/action/resource and shows the path through the policies — the canonical debugger. The others are unrelated.
Related questions
Which managed AWS service centralises and accelerates cross-Region private traffic betweenWhich Route 53 feature distributes requests to multiple endpoints proportionally based on An application backed by an ALB receives an unusually high number of 4xx errors from a fewWhich AWS service allows centrally rotating keys, audit-logging key usage, and enforcing kAn EC2 instance in a private subnet needs outbound HTTPS to api.example.com but no inboundWhich managed service lets you privately connect a VPC to an AWS service (e.g. S3, DynamoDWhich networking object inside a VPC is STATELESS (return traffic doesn't auto-allow) and Which AWS feature provides DDoS protection at L3/L4 for all AWS customers by default, with