An Enterprise Wants to Use a Third-Party SaaS Application

question 486

Multiple Choice

An enterprise wants to use a third-party SaaS application. The SaaS application needs to have access to issue several API commands to discover Amazon EC2 resources running within the enterprise's account The enterprise has internal security policies that require any outside access to their environment must conform to the principles of least privilege and there must be controls in place to ensure that the credentials used by the SaaS vendor cannot be used by any other third party. Which of the following would meet all of these conditions?

• A) From the AWS Management Console, navigate to the Security Credentials page and retrieve the access and secret key for your account.
• B) Create an IAM user within the enterprise account assign a user policy to the IAM user that allows only the actions required by the SaaS application create a new access and secret key for the user and provide these credentials to the SaaS provider.
• C) Create an IAM role for cross-account access allows the SaaS provider's account to assume the role and assign it a policy that allows only the actions required by the SaaS application.
• D) Create an IAM role for EC2 instances, assign it a policy that allows only the actions required tor the SaaS application to work, provide the role ARN to the SaaS provider to use when launching their application instances.

---

Definitions:

Shareholders' Equity

The residual interest in the assets of a corporation after deducting its liabilities, representing the net worth of the company to its shareholders.

Stock Split

An action by a company to divide its existing shares into multiple new shares to boost the stock's liquidity, although the overall value of the company remains unchanged.

Market Price

The current price at which an asset or service can be bought or sold in the marketplace.

Comprehensive Income

It encompasses all changes in equity during a period, except those resulting from investments by and distributions to owners.