Q250.A company hes several development teams collaborating on multiple projects.Developers frequently move between projects and each project requires access to a different set of AWS resources.There are current projects for webmobile and database development Howeverthe set of projects may change over time.Developers should have full control over the resources for the project to Which they are assigned and read-only access to resources for all other projects.When developers are assigned to a different project or new AWS
Resources are added. the company wants to maintenance.What type of control policy should a solutions architect recommend?
A.Create a policy document for each project with specific project tags and allow full control of the resources with a matching tag. Allow read only access for all other resources. Attach the project- specific policy document to the lAM role for that project. Change the role assigned to the developer's IAM user when they change projects. Assign a specific project tag to new resources when they are created. B.Create an IAM role for each project that requires access to AWS resources. Attach an inline policy document to the rolethat specifies the IAM users that are allowed to assume the role with full control of the resources that belong to a project and read only access for all other resources within the account.Update the policy document when the set of resources changes or developers change projects. C.Create a customer manage Specify full control policy document for each project that requires access to AWS resources. Specify full control of the resources that belong to a projects and read -only access for all other resources within the account.Attach the project-specific policy document to the developer' s IAM user when they change projects.Update the policy document when the set of resources changes. D.Create a customer manage policy document for each project that requires access to AWS resources Specify full control of the resources that belong to a project and read-only access for all other resources within the account.Attach the project-specific policy document to an IAM group Change the group membership正确答案D
When developer' s change projects Update the policy document when the set to resources changes.
