A social photo-sharing web application is hosted on EC2 instances behind an ELB. Users can upload their photos and it also shows a leaderboard on the homepage of the app. The uploaded photos are stored in S3 and the leaderboard data is maintained in DynamoDB. The EC2 instances need to access both S3 and DynamoDB for these features. As a Solutions Architect, which of the following solutions would you recommend as the MOST secure option?

Attach appropriate IAM role to EC2 instance profile so that instance can access S3 and DynamoDB

Configure AWS CLI on EC2 instance using a valid IAM user's credentials. Application code can then invoke shell script to access S3 and DynamoDB via AWS CLI

Save AWS credentials access key ID and secret access in a configuration file withing the application code on EC2 instance which can use credentials to access S3 and Dynamo DB.

Encrypt AWS credentials via a custom encryption library and save in secret directory on EC2 instance. Application code can later decrypt AWS credentials to make API calls to S3 and DynamoDB

Correct Option - a

To get all Infosys Certified AWS Solutions Architect Professional Exam questions Join Group https://bit.ly/infy_premium_group

We're passionate about offering best placement materials and courses!! A one stop place for Placement Materials. We daily post Offcampus updates and Placement Materials.

Qtr No. 213, New Town Yehlanka Indore 454775

admin@prepflix.in