SAA-C03 · Question #474
A company runs several applications on Amazon EC2 instances. The company stores configuration files in an Amazon S3 bucket. A solutions architect must provide the company's applications with access…
The correct answer is C. Use an IAM role to grant the necessary permissions to the applications. The best security practice when providing EC2 instances access to AWS services (like S3) is to use an IAM role with an instance profile. This avoids hardcoding secrets and enables automatic credential rotation. "We strongly recommend that you use IAM roles for applications that…
Question
A company runs several applications on Amazon EC2 instances. The company stores configuration files in an Amazon S3 bucket. A solutions architect must provide the company's applications with access to the configuration files. The solutions architect must follow AWS best practices for security. Which solution will meet these requirements?
Options
- AUse the AWS account root user access keys.
- BUse the AWS access key ID and the EC2 secret access key.
- CUse an IAM role to grant the necessary permissions to the applications.
- DActivate multi-factor authentication (MFA) and versioning on the S3 bucket.
How the community answered
(27 responses)- A4% (1)
- C93% (25)
- D4% (1)
Explanation
The best security practice when providing EC2 instances access to AWS services (like S3) is to use an IAM role with an instance profile. This avoids hardcoding secrets and enables automatic credential rotation. "We strongly recommend that you use IAM roles for applications that run on Amazon EC2 instances to securely access AWS services." No manual credentials Temporary and automatically rotated keys Least privilege access via IAM policies Incorrect Options: A: Root user access is not to be used for programmatic access. B: Storing secret keys is insecure and discouraged. D: MFA/versioning improves object protection, not access control.
Community Discussion
No community discussion yet for this question.