Question

A company is onboarding 40 new developers who all need identical access to a set of AWS services. The security team wants to manage these permissions efficiently and ensure that any future policy change automatically applies to all developers. What is the recommended approach?

Accepted Answer

Create an IAM group with the required policies attached and add all developer IAM users to that group

Answer

Attach the required IAM policies individually to each developer's IAM user

Answer

Share a single IAM user among all 40 developers to simplify permission management

Answer

Store the developers' access keys in AWS Secrets Manager and distribute them as needed