Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 411 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 411
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A company has an application workflow that uses an AWS Lambda function to download and decrypt files from Amazon S3. These files are encrypted using AWS
Key Management Service (AWS KMS) keys. A solutions architect needs to design a solution that will ensure the required permissions are set correctly.
Which combination of actions accomplish this? (Choose two.)

A. Attach the kms:decrypt permission to the Lambda function's resource policy.
B. Grant the decrypt permission for the Lambda IAM role in the KMS key's policy.
C. Grant the decrypt permission for the Lambda resource policy in the KMS key's policy.
D. Create a new IAM policy with the kms:decrypt permission and attach the policy to the Lambda function.
E. Create a new IAM role with the kms:decrypt permission and attach the execution role to the Lambda function.

Show Suggested Answer

Suggested Answer: BE 🗳️

by rodriiviru at Sept. 5, 2022, 3 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

jw1806

2 years, 8 months ago

Selected Answer: BE

iam for lambda, and assign role to it.

upvoted 1 times

...

rodriiviru

2 years, 8 months ago

B&Eeeeeeeeeee

upvoted 1 times

...