Security & Compliance第 30 / 100 题
An application running on an EC2 instance needs to read objects from an S3 bucket. What is the recommended way to grant this access?
a.Embed long-term access keys in the application code
b.Make the S3 bucket public
c.Attach an IAM role to the EC2 instance
d.Share the root user credentials with the instance
解析
Attaching an IAM role to the EC2 instance provides temporary, automatically rotated credentials to the application, avoiding hard-coded keys. This follows the principle of least privilege and is far more secure than embedding static keys.
免费刷完整 100 道题库 — 无需注册。
同考点相关题目
- Which AWS service is used to create users, groups, and roles and to control their permissions to AWS resources?
- What is the AWS best practice for the root user of an AWS account?
- Which security measure adds a second form of verification, such as a code from a device, when signing in to AWS?
- Which principle recommends granting users only the permissions they need to perform their tasks and nothing more?
- Which AWS service provides a managed distributed denial-of-service (DDoS) protection for applications running on AWS?
- Which service helps protect web applications from common exploits such as SQL injection and cross-site scripting by filtering HTTP requests?