Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 584 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 584
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A solutions architect is using an AWS CloudFormation template to deploy a three-tier web application. The web application consists of a web tier and an application tier that stores and retrieves user data in Amazon DynamoDB tables. The web and application tiers are hosted on Amazon EC2 instances, and the database tier is not publicly accessible. The application EC2 instances need to access the DynamoDB tables without exposing API credentials in the template.
What should the solutions architect do to meet these requirements?

A. Create an IAM role to read the DynamoDB tables. Associate the role with the application instances by referencing an instance profile.
B. Create an IAM role that has the required permissions to read and write from the DynamoDB tables. Add the role to the EC2 instance profile, and associate the instance profile with the application instances.
C. Use the parameter section in the AWS CloudFormation template to have the user input access and secret keys from an already-created IAM user that has the required permissions to read and write from the DynamoDB tables.
D. Create an IAM user in the AWS CloudFormation template that has the required permissions to read and write from the DynamoDB tables. Use the GetAtt function to retrieve the access and secret keys, and pass them to the application instances through the user data.

Show Suggested Answer

Suggested Answer: B 🗳️

by Curious76 at Sept. 7, 2022, 1:30 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

rodriiviru

2 years, 7 months ago

Selected Answer: B

Both read and write access is needed

upvoted 1 times

...

sivasumanth

2 years, 8 months ago

Selected Answer: B

Both read and write access is needed, question clearly mentioned that the application stores and retrieves data

upvoted 3 times

...

nymets

2 years, 8 months ago

Selected Answer: B

Read + Write access is required.

upvoted 1 times

...

Curious76

2 years, 8 months ago

Selected Answer: A

No read and write. Just read.

upvoted 1 times

guptatrng

2 years, 8 months ago

Why "No read and write" ? The question clearly states that application tier STORE and RETRIEVE the data from DynamoDB. Which means write and read... I think answer should be B

upvoted 3 times

...