A Developer Has Code Stored in an Amazon S3 Bucket

question 172

Multiple Choice

A developer has code stored in an Amazon S3 bucket. The code must be deployed as an AWS Lambda function across multiple accounts in the same Region as the S3 bucket. The Lambda function will be deployed using an AWS CloudFormation template that is run for each account. What is the MOST secure approach to allow access to the Lambda code in the S3 bucket?

• A) Grant the CloudFormation execution role S3 list and get permissions. Add a bucket policy to Amazon S3 with the Principal of "AWS": [account numbers].
• B) Grant the CloudFormation execution role S3 get permissions. Add a bucket policy to Amazon S3 with the Principal of "*".
• C) Use a service-based link to grant the Lambda function S3 list and get permissions by explicitly adding the S3 bucket's account number in the resource.
• D) Use a service-based link to grant the Lambda function S3 get permissions and add a Resource of "*" to allow access to the S3 bucket.

---

Definitions:

Medial Forebrain Bundle

A neural pathway in the brain that connects the brainstem to various structures in the forebrain, involved in the mediation of reward and pleasure.

Hippocampus

A curved structure located within the brain's temporal lobe, playing a central role in memory formation and spatial navigation.

Regulatory Behaviors

Actions that an organism engages in to adapt to its environment and maintain homeostasis, such as temperature regulation or hunger management.

Physiological Responses

The body's automatic reactions to a stimulus, involving processes such as heart rate, respiration, and hormone secretion.