Topic 1 Question 428
2 つ選択A developer is deploying an application on Amazon EC2 instances that run in Account A. The application needs to read data from an existing Amazon Kinesis data stream in Account B.
Which actions should the developer take to provide the application with access to the stream?
Update the instance profile role in Account A with stream read permissions.
Create an IAM role with stream read permissions in Account B.
Add a trust policy to the instance profile role and IAM role in Account B to allow the instance profile role to assume the IAM role.
Add a trust policy to the instance profile role and IAM role in Account B to allow reads from the stream.
Add a resource-based policy in Account B to allow read access from the instance profile role.
ユーザの投票
コメント(8)
- 正解だと思う選択肢: BC
Answer is BC
👍 4aragon_saa2024/09/11 - 正解だと思う選択肢: BE
C: This action involves cross-account role assumption, but for Kinesis access, you would typically use resource-based policies rather than cross-account role assumption unless the use case specifically involves assuming roles across accounts.
👍 428304e52024/09/14 - 正解だと思う選択肢: BC👍 4jasonczx2024/09/15
シャッフルモード