ACloud Guru Certified Cloud Practitioner Practice Exam

How can you provide temporary access to resources in AWS for a new application?

1. Store access key in an S3 Bucket

2. Add the application to a group with permissions

3. Create an IAM Role for the application

4. Create and attach an IAM Policy to the application

The correct answer is: Create an IAM Role for the application

Creating an IAM Role for the application is an effective way to provide temporary access to resources in AWS. IAM Roles are designed for scenarios where applications or services need access to AWS resources without the need to generate long-term credentials like access keys. When a role is created, specific permissions can be attached to it through policies, which define what actions the role can perform on which resources. The role can then be assumed by the application when it runs, allowing it to obtain temporary credentials that are valid for a limited period. This approach enhances security because it reduces the risk associated with long-term credentials that can be compromised. Using IAM Roles also supports the principle of least privilege, ensuring that applications only have the necessary permissions for the duration of their tasks. This is especially beneficial in environments where applications start and stop frequently, as it allows for dynamic permission management tied closely to the application's lifecycle.