Exam AWS Certified Developer Associate All Questions

View all questions & answers for the AWS Certified Developer Associate exam

Exam AWS Certified Developer Associate topic 1 question 129 discussion

Exam question from Amazon's AWS Certified Developer Associate

Question #: 129
Topic #: 1

[All AWS Certified Developer Associate Questions]

A developer is testing a Docker-based application that uses the AWS SDK to interact with Amazon DynamoDB. In the local development environment, the application has used IAM access keys. The application is now ready for deployment onto an ECS cluster.
How should the application authenticate with AWS services in production?

A. Configure an ECS task IAM role for the application to use.
B. Refactor the application to call AWS STS AssumeRole based on an instance role.
C. Configure AWS access key/secret access key environment variables with new credentials.
D. Configure the credentials file with a new access key/secret access key.

Show Suggested Answer

Suggested Answer: A 🗳️

by awscertified at Sept. 18, 2019, 6:45 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

awscertified

Highly Voted 3 years, 9 months ago

A. Configure an ECS task IAM role for the application to use

upvoted 20 times

...

Bach999

Highly Voted 3 years, 9 months ago

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html With IAM roles for Amazon ECS tasks, you can specify an IAM role that can be used by the containers in a task.

upvoted 5 times

...

SD_CS

Most Recent 1 year, 5 months ago

Selected Answer: A

Creating a different Role for each task is a good practice

upvoted 1 times

...

rcaliandro

2 years ago

Selected Answer: A

The roles are assumed by containers and running in the task. We need to configure a role for that specific task. A is the right path

upvoted 1 times

...

softlove89

3 years, 2 months ago

Selected Answer: A

A. Configure an ECS task IAM role for the application to use

upvoted 1 times

...

niki1310

3 years, 2 months ago

Selected Answer: A

ecs task iam role

upvoted 2 times

...

tasbasi

3 years, 2 months ago

Selected Answer: A

as stated clearly by : Your Amazon ECS tasks can have an IAM role associated with them. The permissions granted in the IAM role are assumed by the containers running in the task. (https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html)

upvoted 2 times

...

Ivanyan

3 years, 2 months ago

Selected Answer: A

A. Configure an ECS task IAM role for the application to use

upvoted 1 times

...

ej123

3 years, 6 months ago

none of the answers provided really hit home... As you can read here (https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html) ECS will make available a URL with temporary credentials (curl 169.254.170.2$AWS_CONTAINER_CREDENTIALS_RELATIVE_URI) accessible from inside the container... it's really up to the application to fetch them... it is not enough to associate a role with the Task

upvoted 1 times

...