AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 285

Question

An AWS Lambda function requires read access to an Amazon S3 bucket and requires read/write access to an Amazon DynamoDB table. The correct IAM policy already exists. What is the MOST secure way to grant the Lambda function access to the S3 bucket and the DynamoDB table?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create an IAM role for the Lambda function. Attach the existing IAM policy to the role. Attach the role to the Lambda function. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified Developer - Associate DVA-C02 — Question 285