A Company Is Developing a New Online Game That Will

question 54

Multiple Choice

A company is developing a new online game that will run on top of Amazon ECS. Four distinct Amazon ECS services will be part of the architecture, each requiring specific permissions to various AWS services. The company wants to optimize the use of the underlying Amazon EC2 instances by bin packing the containers based on memory reservation. Which configuration would allow the Development team to meet these requirements MOST securely?

• A) Create a new Identity and Access Management (IAM) instance profile containing the required permissions for the various ECS services, then associate that instance role with the underlying EC2 instances.
• B) Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then configure each ECS service to reference the associated IAM role.
• C) Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then, create an IAM group and configure the ECS cluster to reference that group.
• D) Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then configure each ECS task definition to referen?e the associated IAM role.

---

Definitions:

Burn-in

A phenomenon where an image or portion thereof becomes permanently fixed on a screen, typically due to prolonged display of static graphics.

Local Account

An account managed directly on a device, allowing a user access without the need for network-based authentication.

Web

A system of interconnected documents and other resources, linked by hyperlinks and URLs, accessible over the Internet.

Folder's Properties

A set of attributes or settings associated with a folder, such as permissions, size, and type.