Exam AWS DevOps Engineer Professional topic 1 question 96 discussion

Chatgpt said: C. The MOST secure solution to correct this issue would be to remove unauthenticated access from the S3 bucket with a bucket policy and use the AWS CLI to download the database population script using temporary security credentials obtained through an IAM role attached to the CodeBuild project. Option C partially addresses this by removing unauthenticated access from the S3 bucket and modifying the service role for the CodeBuild project to include Amazon S3 access. However, it does not address the need for secure access to the S3 bucket using temporary security credentials obtained through an IAM role attached to the CodeBuild project. Therefore, the correct answer is C with the addition of using temporary security credentials obtained through an IAM role attached to the CodeBuild project to access the S3 bucket.

C Is the correct answer with this assessment you will get free access https://www.netcomlearning.com/en-us/assessment/36703/devops-engineering-aws.html?advid=1356

C is the way.

C is correct. IAM role is a better practice than using IAM access key and secret access key.

D is the correct answer.Option C is also a secure way to correct the issue.However, using an IAM access key and secret access key in addition to modifying the service role for the CodeBuild project is a more secure way to ensure that the CodeBuild project has the necessary permissions to access the S3 bucket.

CCCCCCCCCCCCCCCCCC

B is the correct answer

C is correct. You need a role to access other AWS services. https://docs.aws.amazon.com/codebuild/latest/userguide/setting-up.html#setting-up-service-role

best practices