You have instances running on your VPC. You have test, production and development based instances running in the VPC. You want to ensure that people who are responsible for the development instances don’t have the access to work on the production instances to ensure better security. Using policies, which of the following would be the best way to accomplish this? Choose the correct answer from the options given below

Answer options:

A.Launch the test and production instances in separate VPC`s and use VPC peering
B.Create an IAM policy with a condition which allows access to only instances that are used for production or development
C.Launch the test and production instances in different Availability Zones and use Multi Factor Authentication
D.Define the tags on the test and production servers and add a condition to the IAM policy which allows access to specific tags

Answer – D
You can easily add tags which define which instances are production and which are development instances and then ensure these tags are used when controlling access via an IAM policy.
For more information on tagging your resources, please refer to the below link:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html