exam questions

Exam AWS Certified Solutions Architect - Associate SAA-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C02 exam

Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 506 discussion

A company has an AWS Lambda function that needs read access to an Amazon S3 bucket that is located in the same AWS account.
Which solution will meet these requirements in the MOST secure manner?

  • A. Apply an S3 bucket policy that grants read access to the S3 bucket.
  • B. Apply an IAM role to the Lambda function. Apply an IAM policy to the role to grant read access to the S3 bucket.
  • C. Embed an access key and a secret key in the Lambda function's code to grant the required IAM permissions for read access to the S3 bucket.
  • D. Apply an IAM role to the Lambda function. Apply an IAM policy to the role to grant read access to all S3 buckets in the account.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
BECAUSE
1 year, 11 months ago
Selected Answer: B
B is the answer
upvoted 1 times
...
thanhch
2 years, 4 months ago
B. Least of privilege
upvoted 1 times
...
mgari
3 years ago
Selected Answer: B
b is the correct
upvoted 4 times
...
Paul_101
3 years, 4 months ago
Answer should be B as D is provides more access than required with granting access to ALL S3 buckets in the account.
upvoted 2 times
...
FF11
3 years, 4 months ago
Selected Answer: B
B is correct.
upvoted 2 times
...
BlassArun
3 years, 4 months ago
Ans is D.
upvoted 1 times
Aniketh
2 years, 10 months ago
“an” are always singular which means 1.
upvoted 1 times
...
Bennie
3 years ago
B as D provides access to all the S3 Buckets. rad the question again
upvoted 1 times
...
...
Sharan_25_v
3 years, 4 months ago
B for sure
upvoted 3 times
...
RidzV
3 years, 4 months ago
Safest way = least privilege. So B is the correct answer. https://aws.amazon.com/premiumsupport/knowledge-center/access-denied-lambda-s3-bucket/
upvoted 3 times
...
shamg
3 years, 5 months ago
B for me
upvoted 1 times
...
nazree
3 years, 5 months ago
B is the answer
upvoted 1 times
...
Subhankar89
3 years, 5 months ago
Answer should B
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago