DVA-C02 · Question #666
A company creates a containerized application for its customers. The company will host the container images in Amazon ECR. The customers need to be able to find the images on their own. A developer…
The correct answer is A. Create a new public ECR repository and registry. Configure an IAM role that can write to the new D. Create a resource policy that allows only specific accounts to add and edit images in the ECR. Create a public ECR repository so that customers can discover and pull the images without needing AWS credentials. Apply an ECR resource policy that explicitly allows only your company’s principals to perform push (PutImage) and mutation actions on the repository. This ensures…
Question
A company creates a containerized application for its customers. The company will host the container images in Amazon ECR. The customers need to be able to find the images on their own. A developer must ensure that only the company can modify the published container images. Which combination of actions should the developer take to meet these requirements? (Choose two.)
Options
- ACreate a new public ECR repository and registry. Configure an IAM role that can write to the new
- BCreate a new private ECR repository and registry. Configure an IAM role that can write to the new
- CCreate a new private ECR repository and registry. Configure Amazon Cognito to grant
- DCreate a resource policy that allows only specific accounts to add and edit images in the ECR
- ECreate a resource policy that allows all accounts to add and edit images in the ECR repository.
How the community answered
(41 responses)- A78% (32)
- B15% (6)
- C2% (1)
- E5% (2)
Explanation
Create a public ECR repository so that customers can discover and pull the images without needing AWS credentials. Apply an ECR resource policy that explicitly allows only your company’s principals to perform push (PutImage) and mutation actions on the repository. This ensures that while anyone can list and pull images (since it’s public), only your account (or IAM roles you specify) can modify the
Community Discussion
No community discussion yet for this question.