Free AWS Certified Developer Associate DVA-C02 Practice Question
An engineer needs to automate resource management on a virtual server hosted on a cloud platform. The application must abide by security best practices and not use long-term static credentials. What is the most secure approach for the engineer to facilitate necessary permissions for the application?
Attach an IAM role to the virtual server which has policies corresponding to the required level of access for the application.
Place access credentials within the application's source code and configure it to reference these for making service requests.
Configure the virtual server to use the cloud platform's root user credentials for all management tasks.
Distribute a static user's access and secret keys to the application through the virtual server's launch configuration.
Embed static access credentials with extensive permissions in the environment variables of the virtual server for application use.
