Correct answer - "Use the AWS CLI --dry-run option" : The --dry-run option checks whether you
have the required permissions for the action, without actually making the request, and provides
an error response. If you have the required permissions, the error response is DryRunOperation,
otherwise it is UnauthorizedOperation.
Incorrect:
"Use the AWS CLI --test option" - Option does not exist
"Retrieve the policy using the EC2 meta data service and use the IAM policy simulator" - EC meta
data service is use to retrieve dynamic information such as instance-id, local-hostname,
public-hostname, etc
"Using the CLI, create a dummy EC2 and delete it using another CLI call" - That would not work as
the current EC2 may have permissions that the dummy instance does not have. If permissions were
the same it can be done but it would be more work