A User Has Created a Mobile Application Which Makes Calls

question 593

Multiple Choice

A user has created a mobile application which makes calls to DynamoDB to fetch certain data. The application is using the DynamoDB SDK and root account access/secret access key to connect to DynamoDB from mobile. Which of the below mentioned statements is true with respect to the best practice for security in this scenario?

• A) The user should create a separate IAM user for each mobile application and provide DynamoDB access with it
• B) The user should create an IAM role with DynamoDB and EC2 access. Attach the role with EC2 and route all calls from the mobile through EC2
• C) The application should use an IAM role with web identity federation which validates calls to DynamoDB with identity providers, such as Google, Amazon, and Facebook
• D) Create an IAM Role with DynamoDB access and attach it with the mobile application

---

Definitions:

Revenue

The complete financial intake a company secures from transactions involving goods or services within a certain interval.

Expenses

Outflows or other using up of assets or incurrence of liabilities during a period from delivering or producing goods, rendering services, or carrying out other activities that constitute the entity’s ongoing major or central operations.

Held-to-maturity Securities

Financial assets purchased with the intention and ability to hold them until a specified maturity date.

Fair Value

The estimated price at which an asset or liability could be sold or settled in a current transaction between willing parties.