Study. uk . com
  1. Home
  2. All questions
  3. Question 8

AWS Certified Solutions Architect study material · question 8 of 500

An application running on an EC2 instance needs to read from S3. Which approach follows AWS security guidance?

  1. Attach an IAM role to the instance so the SDK collects temporary credentials
  2. Store an IAM user's access key in the application's configuration file
  3. Embed an access key in the AMI used to launch the instance
  4. Pass an access key through instance user data at launch
Show the answer

Answer: A. Attach an IAM role to the instance so the SDK collects temporary credentials

AWS delivers a role's temporary credentials to the instance and the SDK finds them, so no long-lived key is stored with the application.

Source: Security best practices in IAM (Amazon Web Services) — Require workloads to use temporary credentials with IAM roles

Challenge yourself on this topic → Study as cards