AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 779

Question

A company has an Amazon Elastic File System (Amazon EFS) file system that contains a reference dataset. The company has applications on Amazon EC2 instances that need to read the dataset. However, the applications must not be able to change the dataset. The company wants to use IAM access control to prevent the applications from being able to modify or delete the dataset. Which solution will meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create a resource policy for the EFS file system that denies the elasticfilesystem:ClientWrite action to the IAM roles that are attached to the EC2 instances. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 779