Topic 1 Question 17
A company is implementing a new business application. The application runs on two Amazon EC2 instances and uses an Amazon S3 bucket for document storage. A solutions architect needs to ensure that the EC2 instances can access the S3 bucket. What should the solutions architect do to meet this requirement?
Create an IAM role that grants access to the S3 bucket. Attach the role to the EC2 instances.
Create an IAM policy that grants access to the S3 bucket. Attach the policy to the EC2 instances.
Create an IAM group that grants access to the S3 bucket. Attach the group to the EC2 instances.
Create an IAM user that grants access to the S3 bucket. Attach the user account to the EC2 instances.
ユーザの投票
コメント(17)
- 正解だと思う選択肢: A
Always remember that you should associate IAM roles to EC2 instances
👍 48sba212022/10/11 - 正解だと思う選択肢: A
The correct option to meet this requirement is A: Create an IAM role that grants access to the S3 bucket and attach the role to the EC2 instances.
An IAM role is an AWS resource that allows you to delegate access to AWS resources and services. You can create an IAM role that grants access to the S3 bucket and then attach the role to the EC2 instances. This will allow the EC2 instances to access the S3 bucket and the documents stored within it.
Option B is incorrect because an IAM policy is used to define permissions for an IAM user or group, not for an EC2 instance.
Option C is incorrect because an IAM group is used to group together IAM users and policies, not to grant access to resources.
Option D is incorrect because an IAM user is used to represent a person or service that interacts with AWS resources, not to grant access to resources.
👍 25Buruguduystunstugudunstuy2022/12/27 Keywords: EC2 instances can access the S3 bucket.
A: Correct - IAM role is used to grant access for AWS services like EC2, Lambda,... B: Incorrect - IAM policy only apply for users cannot attach it to EC2 (AWS service). C: Incorrect - IAM group is used to group of permission and attach to list of users. D: Incorrect - To make EC2 work we need access key and secret access key but not user account. But even when we use access key and secret access key of user it's not recommended because anyone can access EC2 instance can get your access key and secret access key and get all permission from the owner. The secure way is using IAM role which we just specify enough role for EC2 instance.
👍 4PhucVuu2023/04/06
シャッフルモード