Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 238 discussion

Exam question from Amazon's AWS Certified Developer - Associate DVA-C02

Question #: 238
Topic #: 1

[All AWS Certified Developer - Associate DVA-C02 Questions]

A developer is working on an application that is deployed on an Amazon EC2 instance. The developer needs a solution that will securely transfer files from the application to an Amazon S3 bucket.

What should the developer do to meet these requirements in the MOST secure way?

A. Create an IAM user. Create an access key for the IAM user. Store the access key in the application’s environment variables.
B. Create an IAM role. Create an access key for the IAM role. Store the access key in the application’s environment variables.
C. Create an IAM role. Configure the IAM role to access the specific Amazon S3 API calls the application requires. Associate the IAM role with the EC2 instance.
D. Configure an S3 bucket policy for the S3 bucket. Configure the S3 bucket policy to allow access for the EC2 instance ID.

Show Suggested Answer

Suggested Answer: C 🗳️

by didorins at Oct. 28, 2023, 9:22 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Claire_KMT

Highly Voted 1 year, 1 month ago

C. Create an IAM role. Configure the IAM role to access the specific Amazon S3 API calls the application requires. Associate the IAM role with the EC2 instance.

upvoted 10 times

...

SerialiDr

Highly Voted 10 months, 3 weeks ago

Selected Answer: C

This approach follows AWS best practices. An IAM role can be created with the necessary permissions to access the S3 bucket. Then, this role can be associated with the EC2 instance. Applications running on the instance can then use the role's permissions to access S3 securely, without needing to manage access keys. This method leverages AWS's built-in security mechanisms and avoids the risks associated with managing static credentials.

upvoted 8 times

...