SAA-C03 Question 185

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B4

  B. Create an IAM role with S3 permissions, and then specify that role as the taskRoleArn in the task definition

• Chose B4

  Option B: Create an IAM role with S3 permissions and specify that role as the taskRoleArn in the task definition. This approach allows the ECS task to assume the specified role and gain the necessary permissions to access Amazon S3. Option A is incorrect because updating the S3 role in IAM and relaunching the container does not associate the updated role with the ECS task. Option C is incorrect because creating a security group that allows access from Amazon ECS to Amazon S3 does not grant the necessary permissions to the ECS task. Option D is incorrect because creating an IAM user with S3 permissions and relaunching the EC2 instances for the ECS cluster does not associate the IAM user with the ECS task.

• 2

  https://repost.aws/knowledge-center/ecs-fargate-access-aws-services