SAP-C02 · Question #408
A publishing company's design team updates the icons and other static assets that an ecommerce web application uses. The company serves the icons and assets from an Amazon S3 bucket that is hosted…
The correct answer is A. In the production account, create a new IAM policy that allows read and write access to the S3 C. In the production account, create a role. Attach the new policy to the role. Define the development E. In the development account, create a group that contains all the IAM users of the design team. 1. In the production account, create a new IAM policy that allows read and write access to the S3 bucket. The policy grants the necessary permissions to access the assets in the production S3 2. In the production account, create a role. Attach the new policy to the role. Define…
Question
A publishing company's design team updates the icons and other static assets that an ecommerce web application uses. The company serves the icons and assets from an Amazon S3 bucket that is hosted in the company's production account. The company also uses a development account that members of the design team can access. After the design team tests the static assets in the development account, the design team needs to load the assets into the S3 bucket in the production account. A solutions architect must provide the design team with access to the production account without exposing other parts of the web application to the risk of unwanted changes. Which combination of steps will meet these requirements? (Choose three.)
Options
- AIn the production account, create a new IAM policy that allows read and write access to the S3
- BIn the development account, create a new IAM policy that allows read and write access to the S3
- CIn the production account, create a role. Attach the new policy to the role. Define the development
- DIn the development account, create a role. Attach the new policy to the role. Define the production
- EIn the development account, create a group that contains all the IAM users of the design team.
- FIn the development account, create a group that contains all tfje IAM users of the design team.
How the community answered
(21 responses)- A81% (17)
- B5% (1)
- D10% (2)
- F5% (1)
Explanation
- In the production account, create a new IAM policy that allows read and write access to the S3 bucket. The policy grants the necessary permissions to access the assets in the production S3 2. In the production account, create a role. Attach the new policy to the role. Define the development account as a trusted entity. By creating a role and attaching the policy, and then defining the development account as a trusted entity, the development account can assume the role and access the production S3 bucket with the read and write permissions. 3. In the development account, create a group that contains all the IAM users of the design team. Attach a different IAM policy to the group to allow the sts:AssumeRole action on the role in the production account. The IAM policy attached to the group allows the design team members to assume the role created in the production account, thereby giving them access to the production
Community Discussion
No community discussion yet for this question.