DVA-C02 Question 164

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  C is the correct answer.

• Chose C2

  This is the most secure and recommended approach. By attaching an IAM policy to the Lambda execution role that grants access only to the specific S3 objects needed, you adhere to the principle of least privilege. This method also uses AWS's built-in mechanism for providing temporary credentials to the Lambda function, eliminating the need to manage access keys.

• Chose C4

  C. Create a Lambda function execution role. Attach a policy to the role that grants access to specific objects in the S3 bucket.