What should be included in the IAM policy to enforce this requirement?

A company requires its developers to access AWS resources from the corporate office only.

What should be included in the IAM policy to enforce this requirement?
A . Resource tags
B . IP whitelisting in the policy condition
C . Time-based restrictions
D . SAML 2.0 integration

View Answer

Answer: B

Explanation:

Correct Answer. B. IP whitelisting in the policy condition To restrict access to AWS resources from specific locations, an administrator can include a condition in the IAM policy that whitelists IP addresses. This ensures that developers can only access resources from the corporate office.

Option A is incorrect because resource tags are used for organizing and managing resources, not for controlling access based on location.

Option C is incorrect because time-based restrictions control when resources can be accessed, not where they can be accessed from.

Option D is incorrect because SAML 2.0 integration is

used for federated authentication with external identity providers, not for restricting access based on IP addresses.