Play free

Security World 1 · Who Can Do What · Stage 6

Access Denied, Why?

Five tickets about access. Read the error message, run the simulator, open Access Analyzer, and only then change a policy.

  • CloudTrail access denied messages
  • IAM policy simulator
  • IAM Access Analyzer
  • Permission set drift
Domain
Security
World
Security World 1: Who Can Do What (Associate)
Game type
Evidence desk: Each ticket is the reporter's words: find its cause in the evidence.
Time
About 30 minutes on a first attempt (estimated)
Exam guides
  • SOA-C03Skill 4.1.2
  • SAP-C02Task 3.2: Determine a strategy to improve security
  • SCS-C03Skill 4.1.3: Troubleshooting authentication issues (for example, CloudTrail, Amazon Cognito, IAM Identity Center permission sets, AWS Directory Service); Skill 4.2.4: Analyze authorization failures to determine causes or effects (for example, IAM Policy Simulator, IAM Access Analyzer); Skill 4.2.5: Investigate and correct unintended permissions, authorizations, or privileges granted to a resource, service, or entity (for example, IAM Access Analyzer)