A company is developing a public web application that needs to access multiple AWS services. The application will have hundreds of users who must log in to the application first before using the…

Question

Options

• ACreate an IAM role for each AWS service that the application needs to access. Assign the roles
• BCreate an IAM role that has the access permissions the web application requires. Configure the
• CUse AWS IAM Identity Center to create a user pool that includes the application users. Assign
• DCreate an IAM user that has programmatic access keys for the AWS services. Store the access

• A
  10% (6)
• B
  84% (51)
• C
  3% (2)
• D
  3% (2)

Explanation

Option Bis the correct solution because: AWS Security Token Service (STS)allows the web application to request temporary security credentials that grant access to AWS resources. These temporary credentials are secure and short- lived, reducing the risk of misuse. Using STS and IAM roles ensures scalability by enabling the application to dynamically assume roles with the required permissions for each AWS service. Option A: Assigning IAM roles directly to instances is less flexible and would grant the same permissions to all applications on the instance, which is not ideal for a multi-service web Option C: AWS IAM Identity Center is used for managing single sign-on (SSO) for workforce users and is not designed for granting programmatic access to web applications. Option D: Storing long-term access keys, even in AWS Systems Manager Parameter Store, is less secure and does not scale well compared to temporary credentials from STS.

No community discussion yet for this question.