Exam AWS Certified Developer Associate topic 1 question 341 discussion

Exam question from Amazon's AWS Certified Developer Associate

Question #: 341
Topic #: 1

[All AWS Certified Developer Associate Questions]

An AWS Lambda function requires read access to an Amazon S3 bucket and requires read/write access to an Amazon DynamoDB table. The correct IAM policy already exists.

What is the MOST secure way to grant the Lambda function access to the S3 bucket and the DynamoDB table?

A. Attach the existing IAM policy to the Lambda function.
B. Create an IAM role for the Lambda function. Attach the existing IAM policy to the role. Attach the role to the Lambda function.
C. Create an IAM user with programmatic access. Attach the existing IAM policy to the user. Add the user access key ID and secret access key as environment variables in the Lambda function.
D. Add the AWS account root user access key ID and secret access key as encrypted environment variables in the Lambda function.

Show Suggested Answer

Suggested Answer: B 🗳️

by DrCloud at Nov. 25, 2022, 3:42 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

a15ce96

1 year, 3 months ago

Selected Answer: B

We have a policy, but we still need a role to be attached to Lamda.

upvoted 1 times

...

k1kavi1

2 years, 7 months ago

Selected Answer: B

Going with B

upvoted 3 times

...

kapil206001

2 years, 7 months ago

Selected Answer: B

always use role & attach bucket policy to role .

upvoted 1 times

...

michaldavid

2 years, 7 months ago

Selected Answer: B

Defo B

upvoted 1 times

...

DrCloud

2 years, 7 months ago

Ans: B You can also manage machine identities for external parties who need access. To give access to machine identities, you can use IAM roles. https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html

upvoted 1 times

...