Topic 1 Question 339
2 つ選択A company stores all personally identifiable information (PII) in an Amazon DynamoDB table named PII in Account A. Developers are working on an application that is running on Amazon EC2 instances in Account B. The application in Account B requires access to the PII table.
An administrator in Account A creates an IAM role named AccessPII that has permission to access the PII table. The administrator also creates a trust policy that specifies Account B as a principal that can assume the role.
Which combination of steps should the developers take in Account B to allow their application to access the PII table?
Allow the EC2 IAM role the permission to assume the AccessPII role.
Allow the EC2 IAM role the permission to access the PII table.
Include the AWS API in the application code logic to obtain temporary credentials from the EC2 IAM role to access the PII table.
Include the AssumeRole API operation in the application code logic to obtain temporary credentials to access the PII table.
Include the GetSessionToken API operation in the application code logic to obtain temporary credentials to access the PII table.
ユーザの投票
コメント(5)
- 正解だと思う選択肢: AD
AssumeRole
-- Returns a set of temporary security credentials that you can use to access AWS resources. -- These temporary credentials consist of an access key ID, a secret access key, and a security token. -- Typically, you use AssumeRole within your account or for cross-account access.
https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html
👍 5trungtd2024/10/04 - 正解だと思う選択肢: AD
AD is the correct answer.
👍 365703c12024/11/24 - 正解だと思う選択肢: BD
The correct answer to ChetGPT is B, D
👍 2komorebi2024/09/26
シャッフルモード