Security & ComplianceQuestion 30 of 100
An application running on an EC2 instance needs to read objects from an S3 bucket. What is the recommended way to grant this access?
a.Embed long-term access keys in the application code
b.Make the S3 bucket public
c.Attach an IAM role to the EC2 instance
d.Share the root user credentials with the instance
Explanation
Attaching an IAM role to the EC2 instance provides temporary, automatically rotated credentials to the application, avoiding hard-coded keys. This follows the principle of least privilege and is far more secure than embedding static keys.
Practice all 100 questions free — no signup required.
Related questions on this topic
- Which AWS service is used to create users, groups, and roles and to control their permissions to AWS resources?
- What is the AWS best practice for the root user of an AWS account?
- Which security measure adds a second form of verification, such as a code from a device, when signing in to AWS?
- Which principle recommends granting users only the permissions they need to perform their tasks and nothing more?
- Which AWS service provides a managed distributed denial-of-service (DDoS) protection for applications running on AWS?
- Which service helps protect web applications from common exploits such as SQL injection and cross-site scripting by filtering HTTP requests?
Last reviewed: · editorial process
PrepPass Editorial Team · Verified against AWS Certified Cloud Practitioner (CLF-C02) · How we review