AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 17

Question

A company is implementing a new business application. The application runs on two Amazon EC2 instances and uses an Amazon S3 bucket for document storage. A solutions architect needs to ensure that the EC2 instances can access the S3 bucket. What should the solutions architect do to meet this requirement?

Accepted Answer

Correct answer: A. Correct: A. An IAM role attached through an instance profile gives the instances temporary, automatically rotated credentials for S3 — the AWS best practice. B, C, and D reflect a misunderstanding: you don't attach a policy, group, or IAM user directly to an EC2 instance. Policies attach to roles, and an IAM user would mean long-lived access keys you'd have to manage.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 17