You have an application running on an EC2 Instance which will allow users to download flies from a private S3 bucket using a pre-signed URL. Before generating the URL the application should verify the existence of the file in S3. How should the application use AWS credentials to access the S3 bucket securely?
A. Use the AWS account access Keys the application retrieves the credentials from the source code of the application.
B. Create an IAM user for the application with permissions that allow list access to the S3 bucket launch the instance as the IAM user and retrieve the IAM user's credentials from the EC2 instance user data.
C. Create an IAM role for EC2 that allows list access to objects in the S3 bucket. Launch the instance with the role, and retrieve the role's credentials from the EC2 Instance metadata
D. Create an IAM user for the application with permissions that allow list access to the S3 bucket. The application retrieves the IAM user credentials from a temporary directory with permissions that allow read access only to the application user.
Answer: C
I have recently passed my IT exam by using Amazon DVA-C02 Exam Dumps. I cannot express adequately how much helpful this guide has been during my preparation. I say thanks for the instructions and guidelines given by the experts on DumpsSpot. It became possible on with this extraordinary material that I got a firm grip over the field. My approach was refined by providing me a deep understanding and the facts about the practical work within the field. Amazon DVA-C02 dumps gave me knowledge and confidence and online practice test polished my abilities and enhanced my performance.
ReplyDeleteGet Amazon DVA-C02 Exam 2023: https://www.dumpsspot.com/amazon/dva-c02-dumps.html