AWS Certified Developer Associate Practice Test 4

Correct answer - "Use the AWS CLI --dry-run option" : The --dry-run option checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation, otherwise it is UnauthorizedOperation.

Incorrect:

"Use the AWS CLI --test option" - Option does not exist

"Retrieve the policy using the EC2 meta data service and use the IAM policy simulator" - EC meta data service is use to retrieve dynamic information such as instance-id, local-hostname, public-hostname, etc

"Using the CLI, create a dummy EC2 and delete it using another CLI call" - That would not work as the current EC2 may have permissions that the dummy instance does not have. If permissions were the same it can be done but it would be more work

For more information visit