Study. uk . com
  1. Home
  2. All questions
  3. Question 132

AWS Certified Solutions Architect study material · question 132 of 500

Why is embedding AWS access keys in a mobile application discouraged?

  1. They are hard to rotate and users can extract them from the app
  2. Mobile platforms refuse to store AWS credentials
  3. AWS blocks API calls originating from mobile devices
  4. Access keys expire after 24 hours on mobile
Show the answer

Answer: A. They are hard to rotate and users can extract them from the app

AWS recommends a role instead, because keys shipped inside an app are difficult to update and can be pulled out by users.

Source: IAM roles (Amazon Web Services) — IAM roles

Challenge yourself on this topic → Study as cards