AWS Solutions Architect Associate Practice Test

Every user created in the IAM system starts with what type of permissions?

1. Full permissions

2. Partial permissions

3. No permissions

4. Admin permissions

The correct answer is: No permissions

When a user is created in AWS Identity and Access Management (IAM), it starts with no permissions by default. This is a security best practice designed to minimize exposure and potential abuse, as it ensures that new users cannot perform any actions until permissions have been explicitly assigned to them. In AWS, IAM follows the principle of least privilege, meaning users and roles have no access until it has been granted. This way, administrators can carefully manage permissions, only allowing actions that are necessary for the user's role. New users can gain permissions through policies that are attached to them or by being assigned to groups with specific permissions. This feature is critical in environments where sensitive operations exist, as it mitigates risks associated with accidental or malicious actions by newly created accounts.