Which actions does this policy allow?

A SysOps administrator must create an IAM policy for a developer who needs access to specific AWS services.

Based on the requirements, the SysOps administrator creates the following policy:

Which actions does this policy allow? (Select TWO.)
A . Create an AWS Storage Gateway.
B . Create an IAM role for an AWS Lambda function.
C . Delete an Amazon Simple Queue Service (Amazon SQS) queue.
D . Describe AWS load balancers.
E . Invoke an AWS Lambda function.

View Answer

Answer: DE

Explanation:

The provided IAM policy grants the following permissions:

Describe AWS Load Balancers:

The policy allows actions with the prefix elasticloadbalancing:. This includes actions like DescribeLoadBalancers and other Describe* actions related to Elastic Load Balancing.

Reference: Elastic Load Balancing API Actions

Invoke AWS Lambda Function:

The policy allows actions with the prefix lambda:, which includes InvokeFunction and other actions that allow listing and describing Lambda functions.

Reference: AWS Lambda API Actions

The actions related to AWS Storage Gateway (create), IAM role (create), and Amazon SQS (delete) are not allowed by this policy. The policy only grants describe/list permissions for storagegateway, elasticloadbalancing, lambda, and list permissions for SQS.