Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Associate · AWS
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A and D are the best choices because they ensure secure authentication with IAM roles and private connectivity to DynamoDB via a VPC endpoint. B. Attach an IAM user that has sufficient privileges to the EKS pod: IAM users are intended for individuals, not applications. C. Allow outbound connectivity to the DynamoDB table through the private subnets’ network ACLs: While this ensures outbound traffic can reach DynamoDB, it doesn't eliminate the need for internet access unless a VPC endpoint is used. E. Embed the access keys in the Java Spring Boot code: Hardcoding access keys in the application code is a security risk.
After seeing D, I didn't even look at option E. its AD correct
B: Wrong, cannot be a user for EKS C: Not possible as NACL need destination CIDR/ports etc. This is not correct way to connect to DynamoDB E: Not secure AD is correct because you need roles for allowing service permissions and accessing DynamoDB with VPC endpoint is the correct way