AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 204

Question

An application has been built with Amazon EC2 instances that retrieve messages from Amazon SQS. Recently, IAM changes were made and the instances can no longer retrieve messages. What actions should be taken to troubleshoot the issue while maintaining least privilege? (Choose two.)

Accepted Answer

Correct answer: B, E. The correct answer is B, E. Option B: Verify that the SQS resource policy does not explicitly deny access to the role used by the instances. Option E: Verify that the role attached to the instances contains policies that allow access to the queue. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes.

AWS Certified Security - Specialty SCS-C02 — Question 204