A company wants to migrate applications from its on-premises servers to AWS. As a first step, the company is modifying and migrating a non-critical application to a single Amazon EC2 instance. The app

Question

Options

• ACreate an IAM role that has administrative access to AWS. Attach the role to the EC2 instance.
• BCreate an IAM user. Attach the AdministratorAccess policy. Copy the generated access key and
• CCreate an IAM role that has the necessary access to Amazon S3. Attach the role to the EC2
• DCreate an IAM user. Attach a policy that provides the necessary access to Amazon S3. Copy the

• A
  5% (2)
• B
  3% (1)
• C
  89% (34)
• D
  3% (1)

Explanation

The best practice for granting AWS service access to EC2 instances is to assign IAM roles with the least privilege necessary. IAM roles attached to EC2 instances provide temporary credentials automatically rotated by AWS, avoiding hard-coded credentials in the application code. Option C adheres to security best practices by assigning an IAM role scoped with the minimum permissions needed to access the S3 bucket. Option A grants administrative access, which violates least privilege principles. Options B and D use IAM users with static credentials, increasing the risk of credential exposure and requiring manual rotation, which is not recommended.

No community discussion yet for this question.