Examkin

Soru

Zorluk: OrtaIdentity and Access Management (IAM)

A software company is configuring permissions for its new AWS environment. The IT administrator needs to manage access for ten developers who require the same set of permissions, and also grant an application running on Amazon Elastic Container Service (Amazon ECS) access to an Amazon DynamoDB table. Which of the following actions represent AWS security best practices to meet these requirements? (Select TWO.)

  1. Create an IAM user group, attach the required permissions policy to it, and add the developers to the group.Cevap
  2. Create an IAM role with the necessary permissions policy and associate it with the ECS task definition.Cevap
  3. C
    Generate a single set of long-term access keys and share them among all developers to simplify administration.
  4. D
    Embed the AWS account root user credentials directly into the application code to ensure uninterrupted database access.
  5. E
    Configure the application to use the physical hardware security credentials of the AWS data center.

Cevap

Create an IAM user group, attach the required permissions policy to it, and add the developers to the group; and create an IAM role with the necessary permissions policy and associate it with the ECS task definition.
The correct options are to create an IAM user group for the developers and to associate an IAM role with the ECS task definition. Grouping users with similar permissions requirements simplifies access management and ensures consistency. Using IAM roles for applications running on AWS services like ECS provides temporary security credentials dynamically, eliminating the need to hardcode or manage long-term keys.

Adım Adım Çözüm

1
Identify the user access requirement for the ten developers who need identical permissions.
Determine that creating an IAM user group and adding the developers to it is the AWS-recommended method to manage collective permissions.
Attaching policies to a group instead of individual users reduces administrative overhead and ensures consistent policy enforcement.
2
Identify the access requirement for the application running on Amazon ECS to access DynamoDB.
Determine that associating an IAM role with the ECS task definition is the secure way to grant permissions to services.
IAM roles provide temporary security credentials, avoiding the risk of hardcoding or exposing long-term access keys.

Anahtar Kavram

AWS IAM best practices including user groups for organizing user permissions and IAM roles for granting temporary credentials to services and applications.
Bu soruyu puanla

Konular

Identity and Access Management (IAM)

Bu konudan daha fazla soru