Study. uk . com
  1. Home
  2. All questions
  3. Question 9

AWS Certified Solutions Architect study material · question 9 of 500

A company runs servers in its own data centre that must call AWS APIs. It already operates an internal PKI. Which mechanism issues temporary AWS credentials to those servers?

  1. An IAM user with a long-lived access key per server
  2. An EC2 instance profile attached to each server
  3. A service-linked role created in the account
  4. IAM Roles Anywhere, using an X.509 certificate from the company PKI
Show the answer

Answer: D. IAM Roles Anywhere, using an X.509 certificate from the company PKI

IAM Roles Anywhere exchanges an X.509 certificate from the customer's own PKI for temporary AWS credentials, so workloads outside AWS avoid static keys.

Source: Security best practices in IAM (Amazon Web Services) — Require workloads to use temporary credentials with IAM roles

Challenge yourself on this topic → Study as cards