What is the primary purpose of an IAM role compared with an IAM user?
- A Roles are assumed temporarily and issue short-lived credentials rather than long-lived keys
- B Roles are for administrators only
- C Roles cannot have policies attached
- D Roles are cheaper
Answer
Roles are assumed temporarily and issue short-lived credentials rather than long-lived keys
Long-lived access keys committed to repositories are the most common cause of AWS credential compromise, which roles eliminate.





