AWS Certified Developer Associate DVA-C02 Practice Question
A software engineer is tasked with enabling an application, hosted on a virtual server, to interact with a cloud object storage service for uploading and downloading data. The engineer needs to implement a secure method of authentication that obviates the need to hardcode or manually input long-term credentials. What is the most appropriate strategy to achieve this while adhering to security best practices?
Manually enter the user credentials for the service at the start of each application session on the virtual server.
Save the service user's access credentials in a text file on the root directory of the virtual server for the application to use.
Assign a role to the virtual server that grants appropriate permissions to interact with the object storage service.
Hardcode the service user's access credentials in the source code of the application on the virtual server.
Assigning a role to the virtual server that specifies the permissions for the object storage service is the most secure and manageably sound approach, allowing the application to access resources without the need to embed or manually enter credentials. This method leverages the capability of the virtual server to use temporary credentials that are automatically rotated, preventing the risks associated with hardcoding or exposing long-term credentials.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is role-based access control (RBAC) in AWS?
Open an interactive chat with Bash
How do temporary security credentials work in AWS?
Open an interactive chat with Bash
What are the security risks of hardcoding credentials in source code?
Open an interactive chat with Bash
AWS Certified Developer Associate DVA-C02
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access