Which of the following is not an IAM best practice?
A) Use primitive roles by default
B) Treat each component of your application as a separate trust boundary
C) Grant roles at the smallest scope needed
D) Restrict who has access to create and manage service accounts in your project

Question

Quizplus · Accepted Answer

Using primitive roles by default is not an IAM best practice because they grant broad permissions and do not follow the principle of least privilege. It's better to use predefined or custom roles that provide more granular access control.

Which of the Following Is Not an IAM Best Practice