Security & ComplianceCâu 30 / 100
An application running on an EC2 instance needs to read objects from an S3 bucket. What is the recommended way to grant this access?
a.Embed long-term access keys in the application code
b.Make the S3 bucket public
c.Attach an IAM role to the EC2 instance
d.Share the root user credentials with the instance
Giải thích
Attaching an IAM role to the EC2 instance provides temporary, automatically rotated credentials to the application, avoiding hard-coded keys. This follows the principle of least privilege and is far more secure than embedding static keys.
Luyện miễn phí toàn bộ 100 câu hỏi — không cần đăng ký.
Câu hỏi liên quan cùng chủ đề
- Which AWS service is used to create users, groups, and roles and to control their permissions to AWS resources?
- What is the AWS best practice for the root user of an AWS account?
- Which security measure adds a second form of verification, such as a code from a device, when signing in to AWS?
- Which principle recommends granting users only the permissions they need to perform their tasks and nothing more?
- Which AWS service provides a managed distributed denial-of-service (DDoS) protection for applications running on AWS?
- Which service helps protect web applications from common exploits such as SQL injection and cross-site scripting by filtering HTTP requests?
Cập nhật gần nhất: · quy trình kiểm tra
Đội Ngũ Biên Tập PrepPass · Đối chiếu với AWS Certified Cloud Practitioner (CLF-C02) · Quy trình kiểm tra