Question
A company has a team of data scientists who use Amazon SageMaker notebook instances to test ML models. When the data scientists need new permissions, the company attaches the permissions to each individual role that was created during the creation of the SageMaker notebook instance.
The company needs to centralize management of the team's permissions.
Which solution will meet this requirement?
- A. Create a single IAM role that has the necessary permissions. Attach the role to each notebook instance that the team uses. Correct
- B. Create a single IAM group. Add the data scientists to the group. Associate the group with each notebook instance that the team uses.
- C. Create a single IAM user. Attach the AdministratorAccess AWS managed IAM policy to the user. Configure each notebook instance to use the IAM user.
- D. Create a single IAM group. Add the data scientists to the group. Create an IAM role. Attach the AdministratorAccess AWS managed IAM policy to the role. Associate the role with the group. Associate the group with each notebook instance that the team uses.
Explanation
The correct answer is A because creating a single IAM role with necessary permissions and attaching it to each SageMaker notebook instance centralizes permission management for the data scientists' team, as per AWS best practices. This approach ensures consistent access control without needing individual roles for each user or notebook instance.
