A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon
DynamoDB.
What is the MOST operationally efficient solution to delegate permissions?

A. Create an IAM role with the required permissions. Attach the role to the EC2 instance.

B. Create an IAM user and use its access key and secret access key in the application.

C. Create an IAM user and use its access key and secret access key to create a CLI profile in the EC2 instance

D. Create an IAM role with the required permissions. Attach the role to the administrative IAM user.








 

Suggested Answer: A

Community Answer: A

Reference:
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html


This question is in CLF-C01 AWS Certified Cloud Practitioner Exam
For getting AWS Certified Cloud Practitioner Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Amazon.
Trademarks, certification & product names are used for reference only and belong to Amazon.
The website does not contain actual questions and answers from Amazon's Certification Exam.