AWS Certified Solutions Architect - Professional SAP-C02 — Topic 1 Question 399

Question

A company wants to migrate its website from an on-premises data center onto AWS. At the same time, it wants to migrate the website to a containerized microservice-based architecture to improve the availability and cost efficiency. The company’s security policy states that privileges and network permissions must be configured according to best practice, using least privilege. A solutions architect must create a containerized architecture that meets the security requirements and has deployed the application to an Amazon ECS cluster. What steps are required after the deployment to meet the requirements? (Choose two.)

Accepted Answer

Correct answer: B, E. The correct answer is B, E. Option B: Create tasks using the awsvpc network mode. Option E: Apply security groups to the tasks, and use IAM roles for tasks to access other resources. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified Solutions Architect - Professional SAP-C02 — Question 399