Bird
0
0

You want to run a batch job on Fargate that processes files from S3 and writes results back. Which combination ensures secure access without embedding credentials in the container?

hard📝 Best Practice Q8 of 15
AWS - ECS and Fargate
You want to run a batch job on Fargate that processes files from S3 and writes results back. Which combination ensures secure access without embedding credentials in the container?
AManually configure AWS CLI inside the container
BStore AWS credentials inside the container environment variables
CUse a public subnet with open internet access
DAssign an IAM task role with S3 permissions to the Fargate task
Step-by-Step Solution
Solution:
  1. Step 1: Identify secure access method for AWS resources

    Assigning an IAM task role to the Fargate task allows secure, temporary permissions without embedding credentials.
  2. Step 2: Exclude insecure or manual methods

    Storing credentials in environment variables or manual CLI config risks exposure; public subnet is unrelated to credentials.
  3. Final Answer:

    Assign an IAM task role with S3 permissions to the Fargate task -> Option D
  4. Quick Check:

    IAM task role = secure AWS access [OK]
Quick Trick: Use IAM task roles for secure AWS access [OK]
Common Mistakes:
  • Embedding credentials inside containers
  • Relying on public subnet for security
  • Manual AWS CLI config inside containers

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes