An Amazon EC2 administrator created the following policy associated with an IAM group containing several users: What is the effect of this policy?
Choose an answer
Tap an option to check your answer.
Correct answer: Users can terminate an EC2 instance in the us-east-1 Region when the user's source IP is 10.100.100.254..
Why this is the answer
The policy explicitly allows ("Effect": "Allow") the ec2:TerminateInstances action. The Condition block specifies two requirements that must both be met for the Allow effect to apply: ec2:Region must be us-east-1, and aws:SourceIp must be 10.100.100.254. Therefore, users in this group can terminate EC2 instances only if the termination request targets the us-east-1 region AND originates from the specified IP address. The other options are incorrect because they misinterpret the Allow effect, the specific region, or the source IP condition. For example, the first option incorrectly states termination is allowed in any region except us-east-1, which contradicts the ec2:Region condition.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed