Examkin

Question

Difficulty: HardMethods of Deploying and Operating in AWS

An enterprise is building a custom employee onboarding web application written in Node.js that runs on-premises. As part of the onboarding process, the application must programmatically create a unique IAM user, assign specific group memberships, and generate temporary access keys for the new hire without manual intervention. Which AWS interaction method is the most appropriate and secure way to implement this integration?

  1. A
    AWS CLI commands executed via shell scripts to provision permanent IAM Roles for each individual employee instead of IAM Users
  2. B
    AWS CloudFormation templates created dynamically to define and deploy the configuration for each new employee
  3. AWS SDK for JavaScript integrated directly into the application codeAnswer
  4. D
    AWS Management Console access configured with the AWS Account Root User credentials for programmatic browser automation

Answer

AWS SDK for JavaScript integrated directly into the application code
The AWS SDK for JavaScript allows developers to make programmatic API calls directly from Node.js code. It is designed specifically for application integration, handling request signing, serialization, and connection retries natively and securely.

Step-by-Step Solution

1
Analyze the requirement for programmatic, automated resource creation from within an on-premises application codebase.
Identify that the solution must interact with the AWS API directly using a programming language (Node.js).
This narrows down the choices to programmatic interfaces rather than manual tools like the AWS Management Console.
2
Compare the use of AWS CLI, AWS SDK, and AWS CloudFormation for application-level integration.
Determine that the AWS SDK is specifically built to provide language-native APIs (such as the AWS SDK for JavaScript), making it the most secure and efficient choice for application integration.
While the CLI is meant for command-line scripting and CloudFormation is meant for infrastructure provisioning, only the SDK is designed for direct integration inside application code.
3
Verify that the selected option aligns with AWS security best practices.
The AWS SDK for JavaScript allows using IAM roles or temporary credentials, avoiding hardcoded root user credentials.
Securing identity management actions requires adhering to the principle of least privilege and using temporary security credentials.

Key Concept

Programmatic interaction with AWS using the AWS Software Development Kit (SDK) for application integration.
Rate this question

Topics

Methods of Deploying and Operating in AWS

More questions from this topic