AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 166

Question

A developer has code that is stored in an Amazon S3 bucket. The code must be deployed as an AWS Lambda function across multiple accounts in the same AWS Region as the S3 bucket. An AWS CloudFormation template that runs for each account will deploy the Lambda function. What is the MOST secure way to allow CloudFormation to access the Lambda code in the S3 bucket?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Grant the CloudFormation service role the S3 ListBucket and GetObject permissions. Add a bucket policy to Amazon S3 with the principal of “AWS”: [account numbers]. Amazon S3 provides durable, scalable object storage that is fully managed. AWS CloudFormation provisions infrastructure as code repeatably.

AWS Certified Developer - Associate DVA-C02 — Question 166