Create an IAM user for each developer and keep the existing broad permissions, rotating keys every 90 days.

Long-lived IAM user access contradicts temporary credentials requirements. Rotating keys reduces exposure but does not prevent repeated leakage or enforce least privilege at scale.

Attach a policy that allows ecs:* and autoscaling:* and rely on developers to self-review that no IAM statements are added to their roles.

Self-review is not an enforceable control. Without a permission boundary or explicit deny, developers could add iam:* permissions and violate the security requirement.

Create a single shared IAM role with full administrator permissions so developers can troubleshoot faster when deployments fail.

Administrator permissions violate least-privilege and allow IAM changes. A shared role also makes accountability weaker and increases blast radius of mistakes.

What does this SAA-C03 question test?

Authentication checks who the user is.

What is the correct answer to this question?

The correct answer is: Use an IAM role that developers assume for deployments; attach least-privilege policies for ECS and Auto Scaling; and attach a permission boundary that does not allow iam:* actions, so additional inline or managed policies cannot grant IAM permissions. — Assuming an IAM role with temporary credentials eliminates the risk and operational burden of leaked access keys. You can grant only the specific ECS and Auto Scaling actions needed for deployment via least-privilege policies, then attach a permission boundary that excludes IAM permissions. This keeps the deployment role from ever gaining iam:* privileges through future policy attachments, while still allowing the required application deployment actions. Why others are wrong: Option A keeps long-lived IAM users, which conflicts with temporary credential requirements and does not eliminate leaked key risk. Option C relies on developers to avoid adding IAM permissions; without enforceable boundaries, escalation is possible. Option D grants administrator access, which violates least privilege and directly allows IAM changes. Only option B uses both role-based temporary access and a boundary to prevent IAM modifications.

What should I do if I get this SAA-C03 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.