The security team is tracking growth in the number of IAM policies in use and needs a report that shows how many policies exist compared to AWS service limits. Which AWS service should be used to compare current IAM policy usage against available quotas?
Choose an answer
Tap an option to check your answer.
Correct answer: AWS Trusted Advisor.
Why this is the answer
AWS Trusted Advisor is the correct choice because it provides checks for service limits, including the number of IAM policies. It offers recommendations to optimize performance, security, fault tolerance, and cost. For this specific scenario, Trusted Advisor's "Service Limits" check would directly show the current IAM policy usage against the AWS account's quota. Amazon Inspector is incorrect because it's a security assessment service that helps identify vulnerabilities in EC2 instances and container images, not for tracking service limits. AWS Config is incorrect as it records and evaluates configurations of AWS resources over time, which is useful for compliance and auditing but doesn't directly track service limits against quotas. AWS Organizations is incorrect because it's used for centrally managing multiple AWS accounts, not for monitoring service quotas within an account.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed