An Application Running on Amazon EC2 Instances Must Access Objects

question 243

Multiple Choice

An application running on Amazon EC2 instances must access objects within an Amazon S3 bucket that are encrypted using server-side encryption using AWS KMS encryption keys (SSE-KMS) . The application must have access to the customer master key (CMK) to decrypt the objects. Which combination of steps will grant the application access? (Choose two.)

• A) Write an S3 bucket policy that grants the bucket access to the key.
• B) Grant access to the key in the IAM EC2 role attached to the application's EC2 instances.
• C) Write a key policy that enables IAM policies to grant access to the key.
• D) Grant access to the key in the S3 bucket's ACL
• E) Create a Systems Manager parameter that exposes the KMS key to the EC2 instances.

---

Definitions:

Electronic Deposit

The transfer of funds directly into a bank account, eliminating the need for physical checks.

Certificate of Deposit

A savings certificate with a fixed maturity date and specified fixed interest rate that is issued by a bank.

Principal

A primary party to a transaction, such as the chief participant in a business or the main amount of a loan.

Foreign Currency

Currency used in a country other than the one in which it is being considered, which usually requires exchange for use.