A developer is creating an Amazon ECS task definition to deploy a containerized application to AWS Fargate. The container needs to pull its image from Amazon ECR, write container logs to Amazon CloudWatch Logs, and query an Amazon DynamoDB table. Which two configurations must the developer specify in the task definition to meet these requirements?
- A task execution role that grants permissions to pull the container image from Amazon ECR and write logs to Amazon CloudWatch LogsAnswer
- A task role that grants permissions to the application code running inside the container to query the Amazon DynamoDB tableAnswer
- CA task role that grants permissions to the Amazon ECS agent to pull the container image from Amazon ECR
- DA task execution role that grants permissions to the application code to read data from the Amazon DynamoDB table
- EA container definition with hardcoded AWS access keys in the environment variables to authenticate the SDK client inside the container
Answer
The developer must specify a task execution role to grant ECR and CloudWatch access to the ECS agent, and a task role to grant DynamoDB access to the application code.
The correct choices specify a task execution role to grant the ECS agent permissions to pull ECR images and write CloudWatch logs, and a task role to grant the application code permissions to query DynamoDB.
Step-by-Step Solution
Key Concept
Amazon ECS Task IAM Roles
Estimated Time:1m 0s