SAA-C03 · Question #167
A company runs an application on Amazon EC2 instances. The instances need to access an Amazon RDS database by using specific credentials. The company uses AWS Secrets Manager to contain the…
The correct answer is A. Create an IAM role, and attach the role to each EC2 instance profile. Use an identity-based policy. IAM Role: Attaching an IAM role to an EC2 instance profile is a secure way to manage permissions without embedding credentials. AWS Secrets Manager: Grants controlled access to database credentials and automatically rotates secrets if configured. Identity-Based Policy: Ensures…
Question
A company runs an application on Amazon EC2 instances. The instances need to access an Amazon RDS database by using specific credentials. The company uses AWS Secrets Manager to contain the credentials the EC2 instances must use. Which solution will meet this requirement?
Options
- ACreate an IAM role, and attach the role to each EC2 instance profile. Use an identity-based policy
- BCreate an IAM user, and attach the user to each EC2 instance profile. Use a resource-based
- CCreate a resource-based policy for the secret that contains the database credentials. Use EC2
- DCreate an identity-based policy for the secret that contains the database credentials. Grant direct
How the community answered
(22 responses)- A86% (19)
- B5% (1)
- D9% (2)
Explanation
IAM Role: Attaching an IAM role to an EC2 instance profile is a secure way to manage permissions without embedding credentials. AWS Secrets Manager: Grants controlled access to database credentials and automatically rotates secrets if configured. Identity-Based Policy: Ensures the IAM role only has access to specific secrets, enhancing
Community Discussion
No community discussion yet for this question.