Câu 106: AWS Certified Developer Associate(Old)

A developer is deploying on application on Amazon EC2 instances that run in Account A. In certain cases, this application needs to read data from a privateAmazon S3 bucket in Account B. The developer must provide the application access to the S3 bucket without exposing the S3 bucket to anyone else. Which combination of actions should the developer take to meet these requirements? (Choose two.)

1. A. Create an IAM role with S3 read permissions in Account B.
2. B. Update the instance profile IAM role in Account A with S3 read permissions. — đáp án hiện tại
3. C. Make the S3 bucket public with limited access for Account A.
4. D. Configure the bucket policy in Account B to grant permissions to the instance profile role. — đáp án hiện tại
5. E. Add a trust policy that allows s3:Get* permissions to the IAM rote in Account B.