Examkin

Soru

Zorluk: OrtaTroubleshooting Local Development and AWS Credentials

A developer is troubleshooting a local Node.js application running inside a Docker container. The application uses the AWS SDK for JavaScript (v3) to read data from an Amazon DynamoDB table. The application is configured to run under a non-root user named `node` with a home directory at `/home/node`. The developer wants the containerized application to use the AWS credentials defined in the `dev-profile` profile from the host machine's `~/.aws/credentials` file. Which combination of actions will allow the application in the container to successfully authenticate using the `dev-profile` credentials? (Select TWO.)

  1. Mount the host machine's ~/.aws directory to /home/node/.aws inside the container.Cevap
  2. Set the AWS_PROFILE environment variable to dev-profile inside the container.Cevap
  3. C
    Copy the host machine's ~/.aws/credentials file into the container image using a COPY instruction in the Dockerfile.
  4. D
    Mount the host machine's ~/.aws directory to /root/.aws inside the container.
  5. E
    Initialize the DynamoDB client in the application code by hardcoding the AWS access keys.

Cevap

Mount the host machine's ~/.aws directory to /home/node/.aws inside the container and set the AWS_PROFILE environment variable to dev-profile inside the container.
The correct combination requires mounting the host's ~/.aws directory to the container user's home directory (/home/node/.aws) so that the AWS SDK running as the 'node' user can read the credentials file. Additionally, setting the AWS_PROFILE environment variable to dev-profile ensures that the SDK uses the specified profile instead of the default profile.

Adım Adım Çözüm

1
Expose the host credentials to the container's non-root user context.
Mounting the host directory ~/.aws to /home/node/.aws makes the credentials accessible to the node user's default home directory path.
By default, the AWS SDK looks for credentials at ~/.aws/credentials in the current user's home directory. Since the container runs as 'node', it searches /home/node/.aws/credentials.
2
Configure the container environment to select the specific profile.
Setting the AWS_PROFILE environment variable to dev-profile tells the AWS SDK which configuration profile to load from the mounted credentials file.
By default, the SDK looks for the default profile. Setting AWS_PROFILE ensures the SDK loads the credentials associated with dev-profile.

Anahtar Kavram

Configuring AWS credentials in local containerized development environments for non-root users.
Bu soruyu puanla

Konular

Troubleshooting Local Development and AWS Credentials

Bu konudan daha fazla soru