AWS Certified Developer Associate Practice Test 1

Correct answer - "Create a group, assign the policy to the group and the users to the group" : IAM Groups is an abstraction making the management of user groups easier. For instance we want to add a new policy to all the users in a group. Now instead of assigning the policy to each individual user, it can just be assigned once to the IAM Group. Read more:

Incorrect:

"Never assign the same policy to two user" - This adds more maintenance

"Use only one account shared by your users" - Bad practice to share credentials. Each user should have their own credentials

"Let your users have admin rights" - This violates the principal of least privilege