AWS IAM Interview Question | What Permissions Should a Developer Have to Restart EC2 Instances? #aws

C. Custom Policy with EC2 restart permissions
Explanation

According to the Principle of Least Privilege, users should receive only the permissions required to perform their job.

If a developer only needs to restart EC2 instances, the best approach is to create a custom IAM policy that allows only the necessary EC2 actions, such as:

ec2:StartInstances
ec2:StopInstances
ec2:RebootInstances

This minimizes security risks and prevents accidental changes to other AWS resources.

Why Other Options Are Incorrect

❌ A. AdministratorAccess

Grants full access to almost all AWS services.
Violates the Principle of Least Privilege.

❌ B. ReadOnlyAccess

Allows viewing resources only.
Cannot restart EC2 instances.

❌ D. Root User

Has unrestricted access to the entire AWS account.
Should never be used for day-to-day operations.
Real-World Example

A company's development team needs to restart application servers after deployments.

Instead of giving developers full administrator rights:

✅ Create a custom IAM policy allowing only:

Start EC2 instances
Stop EC2 instances
Reboot EC2 instances

This keeps the environment secure while enabling developers to perform their tasks.

#aws #iam #ec2 #awsinterviewquestions #cloudcomputing

Видео AWS IAM Interview Question | What Permissions Should a Developer Have to Restart EC2 Instances? #aws канала CloudDev