AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 428

Question

A developer is deploying an application on Amazon EC2 instances that run in Account A. The application needs to read data from an existing Amazon Kinesis data stream in Account B. Which actions should the developer take to provide the application with access to the stream? (Choose two.)

Accepted Answer

Correct answer: B, C. The correct answer is B, C. Option B: Create an IAM role with stream read permissions in Account B. Option C: Add a trust policy to the instance profile role and IAM role in Account B to allow the instance profile role to assume the IAM role. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified Developer - Associate DVA-C02 — Question 428