Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 554 discussion

Exam question from Amazon's AWS Certified Developer - Associate DVA-C02

Question #: 554
Topic #: 1

[All AWS Certified Developer - Associate DVA-C02 Questions]

A developer has an application that runs in AWS Account A. The application must retrieve an AWS Secrets Manager secret that is encrypted by an AWS Key Management Service (AWS KMS) key from AWS Account B. The application’s role has permissions to access the secret in Account B.

The developer must add a statement to the KMS key’s key policy to allow the role in Account A to use the KMS key in Account B. The permissions must grant least privilege access to the role.

Which permissions will meet these requirements?

A. kms:Decrypt and kms:DescribeKey
B. secretsmanager:DescribeSecret and secretsmanager:GetSecretValue
C. kms:*
D. secretsmanager:*

Show Suggested Answer

Suggested Answer: A 🗳️

by 0bdf3af at March 3, 2025, 8:46 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Dadasar

1 month, 3 weeks ago

Selected Answer: A

Padrão de menor privilégios. O acesso é a chave KMS e não a secret

upvoted 1 times

...

0bdf3af

1 month, 3 weeks ago

Selected Answer: A

least priviliges

upvoted 1 times

...

Exam AWS Certified Developer - Associate DVA-C02 All Questions

View all questions & answers for the AWS Certified Developer - Associate DVA-C02 exam

Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 554 discussion

Comments

Dadasar

0bdf3af

SY0-701