ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Developer Associate All Questions

View all questions & answers for the AWS Certified Developer Associate exam
Go to Exam

Exam AWS Certified Developer Associate topic 1 question 434 discussion

Exam question from Amazon's AWS Certified Developer Associate
Question #: 434
Topic #: 1
[All AWS Certified Developer Associate Questions]

A company stores all personally identifiable information (PII) in an Amazon DynamoDB table named PII in Account A. Developers are working on an application that is running on Amazon EC2 instances in Account B. The application in Account B requires access to the PII table.

An administrator in Account A creates an IAM role named AccessPII that has permission to access the PII table. The administrator also creates a trust policy that specifies Account B as a principal that can assume the role.

Which combination of steps should the developers take in Account B to allow their application to access the PII table? (Choose two.)

  • A. Allow the EC2 IAM role the permission to assume the AccessPII role
  • B. Allow the EC2 IAM role the permission to access the PII table.
  • C. Include the AWS API in the application code logic to obtain temporary credentials from the EC2 IAM role to access the PII table.
  • D. Include the AssumeRole API operation in the application code logic to obtain temporary credentials to access the PII table.
  • E. Include the GetSessionToken API operation in the application code logic to obtain temporary credentials to access the PII table.
Show Suggested Answer Hide Answer
Suggested Answer: AD 🗳️
by KT_Yu at Jan. 21, 2023, 2:03 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
KT_Yu
Highly Voted 2 years, 3 months ago
Selected Answer: AD
A and D
upvoted 7 times
...
tullio85
Most Recent 3 months, 2 weeks ago
Selected Answer: AD
A and D
upvoted 1 times
...
mgonblan
1 year, 11 months ago
D and E. We are not talking about ecs, we are accessing to a DynamoDB Table, so the account A AccessPII Role, so, to access the table, the account B must assume the role and get credentials for DynamoDB.
upvoted 1 times
...
pancman
2 years, 1 month ago
This question was on the exam today (Feb 2023)
upvoted 3 times
...
DrCloud
2 years, 2 months ago
Selected Answer: AD
AssumeRole -- Returns a set of temporary security credentials that you can use to access AWS resources. -- These temporary credentials consist of an access key ID, a secret access key, and a security token. -- Typically, you use AssumeRole within your account or for cross-account access. https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html
upvoted 2 times
...
breathingcloud
2 years, 3 months ago
Selected Answer: BD
Its B and D There is minor difference in the option A &B, non technical . Role name is more accurate on option B
upvoted 1 times
breathingcloud
2 years, 3 months ago
Sorry its A & D
upvoted 1 times
...
...
JagpreetLM10
2 years, 3 months ago
Selected Answer: BD
B & D for sure
upvoted 1 times
JagpreetLM10
2 years, 3 months ago
A and D . Misunderstood the tricky part.
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago