An Administrator Is Using Amazon CloudFormation to Deploy a Three

question 156

Multiple Choice

An administrator is using Amazon CloudFormation to deploy a three tier web application that consists of a web tier and application tier that will utilize Amazon DynamoDB for storage when creating the CloudFormation template. Which of the following would allow the application instance access to the DynamoDB tables without exposing API credentials?

• A) Create an Identity and Access Management Role that has the required permissions to read and write from the required DynamoDB table and associate the Role to the application instances by referencing an instance profile.
• B) Use the Parameter section in the Cloud Formation template to nave the user input Access and Secret Keys from an already created IAM user that has me permissions required to read and write from the required DynamoDB table.
• C) Create an Identity and Access Management Role that has the required permissions to read and write from the required DynamoDB table and reference the Role in the instance profile property of the application instance.
• D) Create an identity and Access Management user in the CloudFormation template that has permissions to read and write from the required DynamoDB table, use the GetAtt function to retrieve the Access and secret keys and pass them to the application instance through user-data.

---

Definitions:

Promissory Note

A financial instrument where the writer promises to pay a specific sum to a specified person or bearer at a determined date.

Accounts Receivable-Rey Company

This term is not standard; however, "Accounts Receivable" typically refers to the money owed to a company by its customers for goods or services delivered but not yet paid for.

Interest Revenue

Income earned from lending money or investing in interest-bearing financial instruments, recorded in the income statement.

Average Collection Period

The average time it takes for a company to receive payments owed by its customers.