AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 339

Question

A company stores all personally identifiable information (PII) in an Amazon DynamoDB table named PII in Account A. Developers are working on an application that is running on Amazon EC2 instances in Account B. The application in Account B requires access to the PII table. An administrator in Account A creates an IAM role named AccessPII that has permission to access the PII table. The administrator also creates a trust policy that specifies Account B as a principal that can assume the role. Which combination of steps should the developers take in Account B to allow their application to access the PII table? (Choose two.)

Accepted Answer

Correct answer: A, D. The correct answer is A, D. Option A: Allow the EC2 IAM role the permission to assume the AccessPII role. Option D: Include the AssumeRole API operation in the application code logic to obtain temporary credentials to access the PII table. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified Developer - Associate DVA-C02 — Question 339