You have defined some custom policies in AWS. You need to test out the permissions assigned to those policies. Which of the following can be used for this purpose via the CLI? Choose 2 answers from the options given below.

Answer options:

A.Get the context keys first.
B.Use the aws iam simulate-custom-policy command.
C.Get the AWS IAM Access keys first.
D.Use the aws iam get-custom-policy command.

Answer – A and B
This is mentioned in the AWS Documentation.
Policy simulator commands typically require calling API operations to do two things.
Evaluate the policies and return the list of context keys that they reference. You need to know what context keys are referenced so that you can supply values for them in the next step.
Simulate the policies, providing a list of actions, resources, and context keys that are used during the simulation.
Because of the right command used in the documentation, all other options are incorrect.
For more information on policy simulation, please refer to the below URL-
https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_testing-policies.html