Question
A company is implementing a new business application. The application runs on two Amazon EC2 instances and uses an Amazon S3 bucket for document storage. A solutions architect needs to ensure that the EC2 instances can access the S3 bucket.
What should the solutions architect do to meet this requirement?
- A. Create an IAM role that grants access to the S3 bucket. Attach the role to the EC2 instances. Correct
- B. Create an IAM policy that grants access to the S3 bucket. Attach the policy to the EC2 instances.
- C. Create an IAM group that grants access to the S3 bucket. Attach the group to the EC2 instances.
- D. Create an IAM user that grants access to the S3 bucket. Attach the user account to the EC2 instances.
Explanation
According to AWS documentation, the correct approach is to create an IAM role with a policy that grants access to the specific Amazon S3 bucket and then attach this role to the EC2 instances. This method ensures that the EC2 instances have the necessary permissions to access the S3 bucket without hardcoding credentials.
