AWS Certified Solutions Architect Associate SAA-C03 Practice Question
A company runs several applications on Amazon EC2 instances that need to read and write data to an Amazon S3 bucket. As a Solutions Architect, you need to design a secure solution that allows the applications to access the S3 bucket, following AWS security best practices. Which approach should you recommend?
Assign an IAM role to the EC2 instances with a policy that grants the necessary permissions to access the S3 bucket.
Use the root user credentials to configure access on the EC2 instances for the S3 bucket.
Create an IAM user with access keys, and store the access keys in the EC2 instances to grant access to the S3 bucket.
Add the EC2 instances to an IAM group that has permissions to access the S3 bucket.