Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Associate · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B - Querying is just a feature of Redshift but primarily it's a Data Warehouse - the question says nothing that historical data would have to be stored or accessed or analyzed
A - Systems Manager Session Manager has EXACTLY that purpose, 'providing secure access to EC2 instances' B - STS can generate temporary IAM credentials or access keys but NOT SSH keys C - Does not 'remove all shared keys' as requested D - Cognito is not meant for internal users, and whole setup is complex
The key reasons why: STS can generate short-lived credentials that provide temporary access to the EC2 instances for administering them. The credentials can be generated on-demand each time access is needed, eliminating the risks of using permanent shared SSH keys. No infrastructure like bastion hosts needs to be maintained. The on-premises administrators can use the familiar SSH tools with the temporary keys.