A Company Needs a New REST API That Can Return

question 260

Multiple Choice

A company needs a new REST API that can return information about the contents of an Amazon S3 bucket, such as a count of the objects stored in it. The company has decided that the new API should be written as a microservice using AWS Lambda and Amazon API Gateway. How should the Developer ensure that the microservice has the necessary access to the Amazon S3 bucket, while adhering to security best practices?

• A) Create an IAM user that has permissions to access the Amazon S3 bucket, and store the IAM user credentials in the Lambda function source code.
• B) Create an IAM role that has permissions to access the Amazon S3 bucket and assign it to the Lambda function as its execution role.
• C) Create an Amazon S3 bucket policy that specifies the Lambda service as its principal and assign it to the Amazon S3 bucket.
• D) Create an IAM role, attach the AmazonS3FullAccess managed policy to it, and assign the role to the Lambda function as its execution role.

---

Definitions:

Administrative Department

A segment of a company responsible for managing the general operations and ensuring the smooth functioning of the business.

Custodial Department

A division within an organization responsible for maintenance, cleaning, and security services.

Step-down Method

A cost allocation method used in accounting where overhead costs are assigned to departments in a sequential order, often starting with the department that incurs the most overhead, then allocating costs down to other departments based on predetermined criteria.

Personnel Department

A division within an organization responsible for managing human resources and employee-related issues.