You Need to Grant a Vendor Access to Your AWS

question 493

Multiple Choice

You need to grant a vendor access to your AWS account. They need to be able to read protected messages in a private S3 bucket at their leisure. They also use AWS. What is the best way to accomplish this?

• A) Create an IAM User with API Access Keys. Grant the User permissions to access the bucket. Give the vendor the AWS Access Key ID and AWS Secret Access Key for the User.
• B) Create an EC2 Instance Profile on your account. Grant the associated IAM role full access to the bucket. Start an EC2 instance with this Profile and give SSH access to the instance to the vendor.
• C) Create a cross-account IAM Role with permission to access the bucket, and grant permission to use the Role to the vendor AWS account.
• D) Generate a signed S3 PUT URL and a signed S3 PUT URL, both with wildcard values and 2 year durations. Pass the URLs to the vendor.

---

Definitions:

Canadian-Ness

The qualities, characteristics, or cultural elements that are considered distinctly Canadian.

Phenotype

The set of observable characteristics of an individual resulting from the interaction of its genotype with the environment.

Guaraní

A group of culturally and linguistically related indigenous peoples in South America, primarily found in Paraguay and parts of the surrounding countries.

Bilingual

Able to speak two languages; in Canadian history, the official recognition of English and French as equal official languages.