nerdexam
Amazon

DVA-C02 · Question #180

An application that runs on AWS Lambda requires access to specific highly confidential objects in an Amazon S3 bucket. In accordance with the principle of least privilege, a company grants access to…

The correct answer is C. Create a Lambda function execution role. Attach a policy to the role that grants access to specific. https://docs.aws.amazon.com/lambda/latest/operatorguide/least-privilege.html

Submitted by joshua94· Mar 5, 2026Security

Question

An application that runs on AWS Lambda requires access to specific highly confidential objects in an Amazon S3 bucket. In accordance with the principle of least privilege, a company grants access to the S3 bucket by using only temporary credentials. How can a developer configure access to the S3 bucket in the MOST secure way?

Options

  • AHardcode the credentials that are required to access the S3 objects in the application code. Use
  • BCreate a secret access key and access key ID with permission to access the S3 bucket. Store the
  • CCreate a Lambda function execution role. Attach a policy to the role that grants access to specific
  • DCreate a secret access key and access key ID with permission to access the S3 bucket. Store the

How the community answered

(28 responses)
  • A
    14% (4)
  • B
    4% (1)
  • C
    79% (22)
  • D
    4% (1)

Explanation

https://docs.aws.amazon.com/lambda/latest/operatorguide/least-privilege.html

Community Discussion

No community discussion yet for this question.

Full DVA-C02 Practice