Free AIP-C01 Web TestEngine Demo

Q26 Single choice

Several application components use models, knowledge bases, S3 data, and tools, but each component needs only a subset of those resources. Which access design best applies least privilege?

A
Give every component one shared execution role and limit access through instructions in the application prompt.
B
Give every component broad read access because read-only model and knowledge access cannot expose protected data.
C
Use one wildcard identity policy for all components and rely only on resource policies for environment separation.
D
Assign separate, narrowly scoped roles by component and environment, with compatible resource policies.

AIP-C01 Web TestEngine demo