You have just developed a new mobile application that handles analytics workloads on large scale datasets that are stored on Amazon Redshift. Consequently, the application needs to access Amazon…

Question

Options

• ACreate an IAM user and generate encryption keys for that user. Create a policy for Redshift read-
• BCreate an HSM client certificate in Redshift and authenticate using this certificate.
• CCreate a Redshift read-only access policy in IAM and embed those credentials in the application.
• DUse roles that allow a web identity federated user to assume a role that allows access to the

• A
  5% (2)
• B
  15% (6)
• C
  8% (3)
• D
  72% (28)

Explanation

The AWS Documentation mentions the following "When you write such an app, you'll make requests to AWS services that must be signed with an AWS access key. However, we strongly recommend that you do not embed or distribute long-term AWS credentials with apps that a user downloads t device, even in an encrypted store. Instead, build your app so that it requests temporary AWS security credentials dynamica when needed using web identify federation. The supplied temporary credentials map to an AWS role that has only the permissioi needed to perform the tasks required by the mobile app". Option A.B and C are all automatically incorrect because you need to use IAM Roles for Secure access to services

No community discussion yet for this question.