While managing permissions for the API Gateway, what could be used to ensure that the right level of permissions is given to Developers, IT Admins, and users? Also, the permissions should be easily managed.

Answer options:

A.Use the secure token service to manage the permissions for different users.
B.Use IAM Policies to create different policies for different types of users.
C.Use the AWS Config tool to manage the permissions for different users.
D.Use IAM Access Keys to create sets of keys for different types of users.

Correct Answer – B
AWS Documentation mentions the following:
You control access to Amazon API Gateway with IAM permissions by controlling access to the following two API Gateway component processes.
To create, deploy, and manage an API in API Gateway, you must grant the API developer permissions to perform the required actions supported by the API management component of API Gateway.
To call a deployed API or to refresh the API caching, you must grant the API caller permissions to perform required IAM actions supported by the API execution component of API Gateway. 
For more information on permissions with the API Gateway, please visit the following URL:
https://docs.aws.amazon.com/apigateway/latest/developerguide/permissions.html