Security & CompliancePregunta 30 de 100
An application running on an EC2 instance needs to read objects from an S3 bucket. What is the recommended way to grant this access?
a.Embed long-term access keys in the application code
b.Make the S3 bucket public
c.Attach an IAM role to the EC2 instance
d.Share the root user credentials with the instance
Explicación
Attaching an IAM role to the EC2 instance provides temporary, automatically rotated credentials to the application, avoiding hard-coded keys. This follows the principle of least privilege and is far more secure than embedding static keys.
Practica las 100 preguntas gratis — sin registro.
Preguntas relacionadas de este tema
- Which AWS service is used to create users, groups, and roles and to control their permissions to AWS resources?
- What is the AWS best practice for the root user of an AWS account?
- Which security measure adds a second form of verification, such as a code from a device, when signing in to AWS?
- Which principle recommends granting users only the permissions they need to perform their tasks and nothing more?
- Which AWS service provides a managed distributed denial-of-service (DDoS) protection for applications running on AWS?
- Which service helps protect web applications from common exploits such as SQL injection and cross-site scripting by filtering HTTP requests?
Última revisión: · proceso editorial
Equipo Editorial de PrepPass · Verificado con AWS Certified Cloud Practitioner (CLF-C02) · Cómo revisamos