An organization has launched 5 instances: 2 for production and 3 for testing. The organization wants that one particular group of IAM users should only access the test instances and not the production ones. How can the organization set that as a part of the policy?
A) Launch the test and production instances in separate regions and allow region wise access to the group
B) Define the IAM policy which allows access based on the instance ID
C) Create an IAM policy with a condition which allows access to only small instances
D) Define the tags on the test and production servers and add a condition to the IAM policy which allows access to specific tags

Question

Quizplus · Accepted Answer

By defining tags on the test and production servers and adding a condition to the IAM policy based on these tags, the organization can control access to specific instances for different IAM user groups.

An Organization Has Launched 5 Instances: 2 for Production and 3