nerdexam
Amazon

SOA-C02 · Question #513

A company has a multi-account environment. Account A has a production application that is hosted on an Amazon EC2 instance. The application needs to query data in an Amazon DynamoDB table that is host

Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #513. The question stem and answer options stay visible for context.

Submitted by andreas_gr· Mar 30, 2026Security and Compliance

Question

A company has a multi-account environment. Account A has a production application that is hosted on an Amazon EC2 instance. The application needs to query data in an Amazon DynamoDB table that is hosted in Account B. A SysOps administrator needs to provide the EC2 instance in Account A with access to the DynamoDB table in Account B. What is the MOST secure solution that will meet these requirements?

Options

  • AUpdate the IAM policy that is attached to the EC2 instance's IAM role to allow the
  • BIn Account B, create an IAM role that has permission to query the DynamoDB table. Add the EC2
  • CUpdate the IAM policy that is attached to the EC2 instance's IAM role to allow the
  • DIn Account B, create a static IAM key that has the appropriate permissions to query the

Unlock SOA-C02 to see the answer

You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#IAM cross-account access#IAM roles#Security best practices#DynamoDB access
Full SOA-C02 Practice