SAA-C03 · Question #188
A company is developing a new application that will run on Amazon EC2 instances. The application needs to access multiple AWS services. The company needs to ensure that the application will not use…
The correct answer is D. Create an IAM role that has permissions to access the required AWS services. Associate the IAM. Why Option D is Correct: IAM Roles with Instance Profiles: Allow applications to access AWS services securely without hardcoding long-term access keys. Short-Term Credentials: IAM roles issue short-term credentials dynamically managed by AWS. Why Other Options Are Not Ideal…
Question
A company is developing a new application that will run on Amazon EC2 instances. The application needs to access multiple AWS services. The company needs to ensure that the application will not use long-term access keys to access AWS services.
Options
- ACreate an IAM user. Assign the IAM user to the application. Create programmatic access keys for
- BCreate an IAM user that has programmatic access keys. Store the access keys in AWS Secrets
- CCreate an IAM role that can access AWS Systems Manager Parameter Store. Associate the role
- DCreate an IAM role that has permissions to access the required AWS services. Associate the IAM
How the community answered
(36 responses)- A17% (6)
- B6% (2)
- C8% (3)
- D69% (25)
Explanation
Why Option D is Correct: IAM Roles with Instance Profiles: Allow applications to access AWS services securely without hardcoding long-term access keys. Short-Term Credentials: IAM roles issue short-term credentials dynamically managed by AWS. Why Other Options Are Not Ideal: Option A and B: Embedding or retrieving long-term access keys introduces security risks and operational overhead. Option C: Combining IAM roles with Parameter Store adds unnecessary complexity.
Community Discussion
No community discussion yet for this question.