IAM Quiz
An EC2 Instance setup in AWS will host an application which will make API calls to the Simple Storage Service. What is an ideal way for the application to access the Simple Storage Service?
A.
Pass API credentials to the instance using instance user data.
B.
Store API credentials as an object in a separate Amazon S3 bucket.
C.
Embed the API credentials into your application.
D.
Create and Assign an IAM role to the EC2 Instance.
D. Create and Assign an IAM role to the EC2 Instance.
AWS Documentation mentions the following:
You can use roles to delegate access to users, applications, or services that don’t normally have access to your AWS resources. It is not a good practice to use IAM credentials for a production-based application. It is always a good practice to use IAM Roles.
For more information on IAM Roles, please visit the following URL:
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html
