AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 225

Question

A company wants to deploy a workload on several hundred Amazon EC2 instances. The company will provision the EC2 instances in an Auto Scaling group by using a launch template. The workload will pull files from an Amazon S3 bucket, process the data, and put the results into a different S3 bucket. The EC2 instances must have least-privilege permissions and must use temporary security credentials. Which combination of steps will meet these requirements? (Choose two.)

Accepted Answer

Correct answer: A, B. The correct answer is A, B. Option A: Create an IAM role that has the appropriate permissions for S3 buckets Add the IAM role to an instance profile. Option B: Update the launch template to include the IAM instance profile. Amazon S3 provides durable, scalable object storage that is fully managed. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 225