Topic 1 Question 237
A developer is receiving AccessDenied errors when the developer invokes API calls to AWS services from a workstation. The developer previously configured environment variables and configuration files on the workstation to use multiple roles with other AWS accounts.
A security engineer needs to help the developer configure authentication. The current credentials must be evaluated without conflicting with other credentials that were previously configured on the workstation.
Where these credentials should be configured to meet this requirement?
In the local AWS CLI configuration file
As environment variables on the local workstation
As variables in the AWS CLI command line options
In the AWS shared configuration file
ユーザの投票
コメント(3)
- 正解だと思う選択肢: C
To configure the current credentials without conflicting with other previously configured credentials on the workstation, the best option is:
C. As variables in the AWS CLI command line options
This approach ensures that the specific set of credentials needed for the current task can be provided directly in the CLI command itself, thus avoiding any potential conflicts with the environment variables or configuration files that might contain other credentials for different roles or accounts.
Configuring credentials this way ensures that each command can be executed with its own specific set of credentials, without affecting the global or shared configurations on the workstation.
👍 3IPLogic2024/12/05 - 正解だと思う選択肢: D
To avoid conflicts with previously configured credentials and ensure proper evaluation, the credentials should be configured in the AWS shared configuration file (option D). This file, typically located at ~/.aws/config on Linux and macOS or C:\Users<username>.aws\config on Windows, allows you to manage multiple profiles and roles without interfering with environment variables or local configuration files1
👍 2rhsilva2024/11/13 - 正解だと思う選択肢: C
Credential Precedence (Highest to Lowest):
- Command Line Options
- Environment Variables
- CLI config file
- Shared config file
using Command Line Options would mean it will limited to until the session is active, next time when these options are not used, it will fall back to environment variables
👍 1723993f2024/11/25
シャッフルモ ード