All library helpdesk staff need the same set of IAM permissions. What is the cleanest foundational way to grant that shared policy?
Select an answer to reveal the explanation.
Short Explanation
Groups are the team jersey — put every helpdesk user in the same group and attach the policy once. Hire someone new, drop them in the group, and they inherit the same permissions without another copy-paste adventure.
Full Explanation
IAM groups bundle users who share permissions; attaching policies to the group applies those permissions consistently. This is simpler and less error-prone than attaching identical policies to each user individually. Groups do not replace least privilege — the attached policy should still be scoped appropriately.