A company is planning on using AWS for hosting their applications. They want complete separation and isolation of their production, testing and development environments.
Which of the following is an ideal way to design such a setup?
A . Use separate VPCs for each of the environments
B . Use separate IAM Roles for each of the environments
C . Use separate IAM Policies for each of the environments
D . Use separate AWS accounts for each of the environments
Answer: D
Explanation:
A recommendation from the AWS Security Best practices highlights this as well
option A is partially valid, you can segregate resources, but a best practise is to have multiple accounts for this setup.
Options B and C are invalid because from a maintenance perspective this could become very difficult For more information on the Security Best practices, please visit the following
URL:
https://dl.awsstatic.com/whitepapers/Security/AWS_Security_Best_Practices.pdf
The correct answer is: Use separate AWS accounts for each of the environments Submit your Feedback/Queries to our Experts
Leave a Reply