Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 289 discussion

This solution satisfies the needs in the most secure manner: • An IAM role provides temporary credentials to the Lambda function to access AWS resources. The function does not have persistent credentials. • The IAM policy grants least privilege access by specifying read access only to the specific S3 bucket needed. Access is not granted to all S3 buckets. • If the Lambda function is compromised, the attacker would only gain access to the one specified S3 bucket. They would not receive broad access to resources.

Has anyone passed this exam, choosing the wrong answers from ExamTopics? or what's the reason for the confusion???

B is correct.

Answer=B

B is correct.

you dont want to grant access to all S3 buckets (which is answer D) - only the one identified (so answer A)

B is only for one bucket and you want to use Role based security here.

C, it says MOST secure manner, so only to one bucket

https://docs.aws.amazon.com/lambda/latest/dg/lambda-permissions.html

This is the most secure and recommended way to provide an AWS Lambda function with access to an S3 bucket. It involves creating an IAM role that the Lambda function assumes, and attaching an IAM policy to the role that grants the necessary permissions to read from the S3 bucket.

B. Least of privilege