An Application Running on Amazon EC2 Instances Must Access Objects

question 243

Multiple Choice

An application running on Amazon EC2 instances must access objects within an Amazon S3 bucket that are encrypted using server-side encryption using AWS KMS encryption keys (SSE-KMS) . The application must have access to the customer master key (CMK) to decrypt the objects. Which combination of steps will grant the application access? (Choose two.)

• A) Write an S3 bucket policy that grants the bucket access to the key.
• B) Grant access to the key in the IAM EC2 role attached to the application's EC2 instances.
• C) Write a key policy that enables IAM policies to grant access to the key.
• D) Grant access to the key in the S3 bucket's ACL
• E) Create a Systems Manager parameter that exposes the KMS key to the EC2 instances.

---

Definitions:

Personal Commitment

An individual's dedication and pledge to a cause, activity, or goal, often reflecting deep personal values and ethics.

PERT

Project Evaluation and Review Technique, a project management tool used to plan, schedule, and control complex tasks.

Non-Routine Projects

Projects characterized by high uncertainty, novelty, and complexity, often requiring customized approaches and flexible problem-solving strategies.

Contribution Margin

The contribution margin represents the difference between a company's sales revenue and its variable costs. It is used to assess how much revenue contributes to covering fixed costs and generating profit.