Amazon
DVA-C02 · Question #180
An application that runs on AWS Lambda requires access to specific highly confidential objects in an Amazon S3 bucket. In accordance with the principle of least privilege, a company grants access to…
The correct answer is C. Create a Lambda function execution role. Attach a policy to the role that grants access to specific. https://docs.aws.amazon.com/lambda/latest/operatorguide/least-privilege.html
Submitted by joshua94· Mar 5, 2026Security
Question
An application that runs on AWS Lambda requires access to specific highly confidential objects in an Amazon S3 bucket. In accordance with the principle of least privilege, a company grants access to the S3 bucket by using only temporary credentials. How can a developer configure access to the S3 bucket in the MOST secure way?
Options
- AHardcode the credentials that are required to access the S3 objects in the application code. Use
- BCreate a secret access key and access key ID with permission to access the S3 bucket. Store the
- CCreate a Lambda function execution role. Attach a policy to the role that grants access to specific
- DCreate a secret access key and access key ID with permission to access the S3 bucket. Store the
How the community answered
(28 responses)- A14% (4)
- B4% (1)
- C79% (22)
- D4% (1)
Explanation
https://docs.aws.amazon.com/lambda/latest/operatorguide/least-privilege.html
Community Discussion
No community discussion yet for this question.