An Application Running on an Amazon EC2 Instance Needs to Access

question 286

Multiple Choice

An application running on an Amazon EC2 instance needs to access an Amazon DynamoDB table. Both the EC2 instance and the DynamoDB table are in the same AWS account. A solutions architect must configure the necessary permissions. Which solution will allow least privilege access to the DynamoDB table from the EC2 instance?

• A) Create an IAM role with the appropriate policy to allow access to the DynamoDB table. Create an instance profile to assign this IAM role to the EC2 instance.
• B) Create an IAM role with the appropriate policy to allow access to the DynamoDB table. Add the EC2 instance to the trust relationship policy document to allow it to assume the role.
• C) Create an IAM user with the appropriate policy to allow access to the DynamoDB table. Store the credentials in an Amazon S3 bucket and read them from within the application code directly.
• D) Create an IAM user with the appropriate policy to allow access to the DynamoDB table. Ensure that the application stores the IAM credentials securely on local storage and uses them to make the DynamoDB calls.

---

Definitions:

Emergency Commitment

The temporary commitment to a mental hospital of a patient who is behaving in a bizarre or violent way.

Psychological Disorder

A condition characterized by disturbances in a person's thoughts, feelings, or behavior, which leads to significant distress or impairment in functioning.

Committed

Showing dedication and perseverance in pursuing goals, or, in a legal context, being compulsorily detained under mental health legislation.

Dangerous

The potential to cause harm or adverse effects to oneself or others.