AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 165

Question

An application that runs on AWS Lambda requires access to specific highly confidential objects in an Amazon S3 bucket. In accordance with the principle of least privilege, a company grants access to the S3 bucket by using only temporary credentials. How can a developer configure access to the S3 bucket in the MOST secure way?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create a Lambda function execution role. Attach a policy to the role that grants access to specific objects in the S3 bucket. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed.

AWS Certified Developer - Associate DVA-C02 — Question 165