Topic 1 Question 187
A company wants to remove all SSH keys permanently from a specific subset of its Amazon Linux 2 Amazon EC2 instances that are using the same IAM instance profile. However, three individuals who have IAM user accounts will need to access these instances by using an SSH session to perform critical duties.
How can a security engineer provide the access to meet these requirements?
Assign an IAM policy to the instance profile to allow the EC2 instances to be managed by AWS Systems Manager. Provide the IAM user accounts with permission to use Systems Manager. Remove the SSH keys from the EC2 instances. Use Systems Manager Inventory to select the EC2 instance and connect.
Assign an IAM policy to the IAM user accounts to provide permission to use AWS Systems Manager Run Command. Remove the SSH keys from the EC2 instances. Use Run Command to open an SSH connection to the EC2 instance.
Assign an IAM policy to the instance profile to allow the EC2 instances to be managed by AWS Systems Manager. Provide the IAM user accounts with permission to use Systems Manager. Remove the SSH keys from the EC2 instances. Use Systems Manager Session Manager to select the EC2 instance and connect.
Assign an IAM policy to the IAM user accounts to provide permission to use the EC2 service in the AWS Management Console. Remove the SSH keys from the EC2 instances. Connect to the EC2 instance as the ec2-user through the AWS Management Console’s EC2 SSH client method.
ユーザの投票
コメント(2)
C is the answer
👍 3div05jkjl2024/10/17- 正解だと思う選択肢: C
AWS Systems Manager Session Manager provides secure, keyless access to EC2 instances. It eliminates the need for SSH keys, meeting the requirement to remove them permanently. It allows IAM users to establish a session directly through the AWS console or CLI. Using an instance profile with an IAM policy that allows SSM management ensures that the EC2 instances are accessible via Session Manager. IAM users can be granted access specifically to Session Manager, ensuring they can perform their duties without needing SSH.
👍 1Pat95952025/01/31
シャッフルモード