Cloud IAM policies for the city deny wildcard administrator actions and require MFA before privileged roles can be assumed. What do these settings exemplify?
Select an answer to reveal the explanation.
Short Explanation
IAM policies are not sticky notes—they are the rules the cloud actually enforces. Blocking wildcard admin and demanding MFA for privileged roles hardens who can do damage. Writing Action:* for everyone is the anti-pattern these controls fix.
Full Explanation
IAM policies are enforceable authorization controls that can deny overly broad privileges (such as wildcard admin) and require MFA for privileged role assumption. They are not merely documentation and are distinct from physical cable labels. Unrestricted Action:* grants contradict least privilege. Cloud+ security controls treat IAM policy design as a primary cloud defense mechanism.