An organization has created one IAM user and applied the below mentioned policy to the user. What entitlements do the IAM users avail with this policy?

Answer options:

A.The policy will allow the user to perform all read-only activities on the EC2 services including EC2 instances, Auto Scaling groups and ELBs.
B.The policy will allow the user to list all the EC2 resources including EC2 instances, Auto Scaling groups and ELBs.
C.The policy will allow the user to perform all read and write activities on the EC2 services including EC2 instances, Auto Scaling groups and ELBs.
D.The policy will allow the user to perform the read-only activities on the EC2 instances and Auto Scaling groups.

Answer – D
AWS Identity and Access Management is a web service that allows organizations to manage users and user permissions for various AWS services. If an organization wants to set up read-only access to EC2 for a particular user, they should mention the action in the IAM policy which entitles the user for Describe rights for EC2, CloudWatch, Auto Scaling, and ELB. The user will have read-only access for EC2, CloudWatch, and Auto Scaling in the policy shown below. Since ELB is not mentioned as a part of the list, the user will not have access to ELB.The above policy will allow the user to view EC2 instances (look at Auto Scaling and CloudWatch).
Options A, B and C are incorrect because the policy does not include ELB permissions.
For more information on IAM policy, please visit the URL:
http://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html