Exam AWS Certified Developer Associate topic 1 question 213 discussion

D. - This option involves attaching a predefined IAM policy template (S3ReadPolicy) to the IAM role associated with the Lambda function's execution environment. - IAM policies define permissions for actions within AWS services. The S3ReadPolicy template, as its name suggests, likely grants permissions related to reading objects from S3 buckets. - By adding this template to the Lambda function's execution role, you are granting the Lambda function the necessary permissions to read objects from S3 buckets specified in the policy. - This is a common practice when you want to ensure that your Lambda function has the appropriate permissions to interact with S3 without manually defining the permissions in detail.

D is correct because lambda needs to read files from S3 so we can use the S3ReadPolicy template

D. Add the S3ReadPolicy template to the Lambda function's execution role. In AWS SAM, the permissions for an AWS Lambda function can be managed through its execution role. To grant the necessary read privilege to the S3 bucket, the developer should add the S3ReadPolicy template to the Lambda function's execution role. The S3ReadPolicy template is an AWS managed policy that grants read-only access to an S3 bucket. It includes permissions to list the objects in the bucket and to read the objects themselves. By adding this policy to the Lambda function's execution role, the function will have the necessary permissions to access the S3 bucket to only read objects.

Agreed D

Lambda execution role is the answer

Agreed