ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 410 - DVA-C01 discussion

Report
Export

A developer has code stored in an Amazon S3 bucket The code must be deployed as an AWS Lambda function across multiple accounts in the same Region as the S3 bucket The Lambda function will be deployed using an AWS CloudFormation template that is run for each account What is the MOST secure approach to allow access to the Lambda code in the S3 bucket?

A.
Grant the CloudFormation execution role S3 list and get permissions Add a bucket policy to Amazon S3 with the Pnncipal of "AWS": [account numbers].
Answers
A.
Grant the CloudFormation execution role S3 list and get permissions Add a bucket policy to Amazon S3 with the Pnncipal of "AWS": [account numbers].
B.
Grant the CloudFormation execution role S3 get permissions Add a bucket policy to Amazon S3 with the Principal of "".
Answers
B.
Grant the CloudFormation execution role S3 get permissions Add a bucket policy to Amazon S3 with the Principal of "".
C.
Use a service-based link to grant the Lambda function S3 list and get permissions by explicitly adding the S3 bucket's account number in the resource
Answers
C.
Use a service-based link to grant the Lambda function S3 list and get permissions by explicitly adding the S3 bucket's account number in the resource
D.
Use a service-based link to grant the Lambda function S3 get permissions and add a Resource of "*" to allow access to the S3 bucket.
Answers
D.
Use a service-based link to grant the Lambda function S3 get permissions and add a Resource of "*" to allow access to the S3 bucket.
Suggested answer: A
asked 16/09/2024
mark obrien
43 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first