SCS-C02 · Question #207
An application has been built with Amazon EC2 instances that retrieve messages from Amazon SQS. Recently, IAM changes were made and the instances can no longer retrieve messages. What actions should…
The correct answer is B. Verify that the SQS resource policy does not explicitly deny access to the role used by the E. Verify that the role attached to the instances contains policies that allow access to the queue. To troubleshoot the issue, the security engineer should verify that the SQS resource policy does not explicitly deny access to the role used by the instances, and that the role attached to the instances contains policies that allow access to the queue. These actions will ensure…
Question
An application has been built with Amazon EC2 instances that retrieve messages from Amazon SQS. Recently, IAM changes were made and the instances can no longer retrieve messages. What actions should be taken to troubleshoot the issue while maintaining least privilege? (Choose two.)
Options
- AConfigure and assign an MFA device to the role used by the instances.
- BVerify that the SQS resource policy does not explicitly deny access to the role used by the
- CVerify that the access key attached to the role used by the instances is active.
- DAttach the AmazonSQSFullAccest. managed policy to the role used by the instances.
- EVerify that the role attached to the instances contains policies that allow access to the queue
How the community answered
(34 responses)- A12% (4)
- B79% (27)
- C3% (1)
- D6% (2)
Explanation
To troubleshoot the issue, the security engineer should verify that the SQS resource policy does not explicitly deny access to the role used by the instances, and that the role attached to the instances contains policies that allow access to the queue. These actions will ensure that the instances have the necessary permissions to retrieve messages from Amazon SQS, while maintaining the principle of least privilege.
Topics
Community Discussion
No community discussion yet for this question.