Câu 11: 312-40V2: Certified Cloud Security Engineer (CCSE) v2

Rebecca Mader has been working as a cloud security engineer in an IT company located in Detroit, Michigan. Her organization uses AWS cloud-based services. An application is launched by a developer on an EC2 instance that needs access to the S3 bucket (photos). Rebecca created a get-pics service role and attached it to the EC2 instance. This service role comprises a permission policy that allows read-only access to the S3 bucket and a trust policy that allows the instance to assume the role and retrieve temporary credentials. The application uses the temporary credentials of the role to access the photo bucket when it runs on the instance. Does the developer need to share or manage credentials or does the admin need to grant permission to the developer to access the photo bucket?

1. A. Yes, the developer has to share or manage credentials, but the admin does not have to grant permission to the developer to access the photo bucket
2. B. No, the developer never has to share or manage credentials and the admin does not have to grant permission to the developer to access the photo bucket — đáp án hiện tại
3. C. No, the developer never has to share or manage credentials, but the admin has to grant permission to the developer to access the photo bucket
4. D. Yes, the developer should share or manage credentials and the admin should grant permission to the developer to access the photo bucket