Bird
0
0

You want to allow an EC2 instance to assume a role temporarily to access S3 buckets. Which combination is correct?

hard📝 Application Q15 of 15
AWS - Identity and Access Management
You want to allow an EC2 instance to assume a role temporarily to access S3 buckets. Which combination is correct?
AManually run <code>aws sts assume-role</code> on the EC2 instance without any IAM role attached.
BCreate an IAM user with S3 permissions and store its permanent keys on the EC2 instance.
CAttach an IAM role with S3 permissions to the EC2 instance and use the instance profile to assume the role automatically.
DAttach a security group to the EC2 instance that allows S3 access.
Step-by-Step Solution
Solution:

  1. Step 1: Understand EC2 role usage

    Attaching an IAM role to EC2 via instance profile allows automatic temporary credentials for S3 access.

  2. Step 2: Evaluate other options

    Manually running aws sts assume-role without an attached IAM role fails due to lack of initial credentials. Using permanent IAM user keys is less secure. Security groups control network access, not IAM permissions.

  3. Final Answer:

    Attach an IAM role with S3 permissions to the EC2 instance and use the instance profile to assume the role automatically. -> Option C

  4. Quick Check:

    EC2 uses instance profile role for temporary access [OK]
Quick Trick: Use instance profile roles for EC2 temporary access [OK]
Common Mistakes:
MISTAKES
  • Using permanent keys on EC2 instead of roles
  • Trying to assume role without attached IAM role
  • Confusing security groups with permissions

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes
AWS CLI - Using profiles for multiple accounts - Quiz 11easy Cloud Computing Fundamentals - What is cloud computing - Quiz 11easy EC2 Fundamentals - Instance states (running, stopped, terminated) - Quiz 13medium EC2 Fundamentals - Instance types and families - Quiz 15hard Identity and Access Management - IAM users and groups - Quiz 12easy Identity and Access Management - Policy evaluation logic - Quiz 9hard S3 Fundamentals - Uploading and downloading objects - Quiz 3easy S3 Fundamentals - Creating S3 buckets - Quiz 8hard S3 Fundamentals - S3 encryption options - Quiz 12easy Security Groups and Network ACLs - Security groups vs NACLs decision - Quiz 1easy