An organization has 500 employees. The organization wants to set up AWS access for each department. Which of the
below mentioned options is a possible solution?

A.
Create IAM roles based on the permission and assign users to each role

B.
Create IAM users and provide individual permission to each

C.
Create IAM groups based on the permission and assign IAM users to the groups

D.
It is not possible to manage more than 100 IAM users with AWS

Explanation:
An IAM group is a collection of IAM users. Groups let the user specify permissions for a collection of users, which can
make it easier to manage the permissions for those users.
http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_WorkingWithGroupsAndUsers.html