Exam AWS Certified Security - Specialty topic 1 question 491 discussion

By deleting or deactivating the compromised IAM access key, you immediately prevent any further use of the exposed key. Discontinuing the use of IAM access keys is a best practice as it reduces the risk of key exposure and unauthorized access. Instead, the recommended approach is to use IAM roles for granting permissions to AWS services. Creating a new IAM role specifically for the Lambda deployment process allows for fine-grained control over the permissions granted to the deployment system. By using roles, you eliminate the need for access keys altogether. Applying the IAM role to the deployment system Lambda functions ensures that the functions have the necessary permissions to perform the required actions while maintaining the principle of least privilege. Responding directly to the abuse report message with details of the remediation steps demonstrates prompt action and compliance with the report.

Firstly, it's important to immediately deactivate or delete the compromised IAM access key to prevent any further misuse. Secondly, instead of using IAM access keys, which can be compromised, it is a best practice to use IAM roles for AWS services. IAM roles are more secure and manageable than long-term access keys. Here, an IAM role should be created for the Lambda functions to carry out the deployment process

A. Locate the compromised IAM access key and deactivate or delete the key. Generate new access keys for the Lambda deployment process. Apply the new keys to the deployment system. In the account that contained the compromised key, create a new support case in AWS Support to detail these remediation steps.

IAM roles are best practice instead of long term access keys: https://docs.aws.amazon.com/accounts/latest/reference/credentials-access-keys-best-practices.html#use-roles

B is correct