Twelve operators each have a unique inline policy copy. When endpoint-update must be removed from analysts, half the copies are missed. What should they use?
Select an answer to reveal the explanation.
Short Explanation
Twelve operators each have a unique inline policy copy, so half the copies miss the next change. Put operators, analysts, and auditors in IAM groups. Unique inline copies drift, and widening analysts to AdministratorAccess is the opposite of least privilege.
Full Explanation
IAM groups hold the operator, analyst, and auditor policies so a permission change is made once. Unique inline copies drift and miss updates. Personalize is not a group, and widening analysts to AdministratorAccess is the opposite of least privilege.