List of questions
Related questions
Question 481 - DVA-C01 discussion
A company has a large number of documents that are stored securely in Amazon S3 The company is creating an application that occasionally will read these documents The application will be deployed on Amazon EC2 instances. The company's security requirements mandate that no long-term credentials can be stored on the EC2 instances and that only the needed documents can be accessed Only authorized users and applications can access the documents access must be logged by Amazon S3, and each document must follow S3 Lifecycle policies for archival and destruction What should a developer do to meet these requirements?
A.
Create an event to invoke an AWS Lambda function when a document is uploaded Configure the function to write the documents to an Amazon Elastic File System (Amazon EFS) file system Configure the EC2 instances to mount the EFS file system Configure the application to access the documents that are stored m the file system as needed
B.
Create a user that has programmatic credentials, and attach a policy that allows read access to the S3 bucket Use the AWS CLI to configure those credentials for the EC2 instances to use Create an Amazon Machine Image (AMI), and add the access key and secret access key to the user data section to create environment variables Use the AMI to launch each EC2 instance that runs the application Add application code to use the keys that are stored in the environment variables to access the S3 bucket objects as needed.
C.
Modify the S3 bucket, make the bucket public, and make each object public Add application code to make REST calls to access the objects in the S3 bucket as needed
D.
Create an IAM role with permissions to read objects from Amazon S3 Attach the role to the EC2 instances as an instance profile Add application code to access the objects in the S3 bucket as needed.
Your answer:
0 comments
Sorted by
Leave a comment first