Question

A development team has deployed an application on an Amazon EC2 instance that needs to read and write objects in an Amazon S3 bucket. The team wants to follow AWS security best practices and avoid storing long-term credentials on the instance. What is the recommended approach to grant the application access to S3?

Accepted Answer

Attach an IAM role with the required S3 permissions to the EC2 instance

Answer

Create an IAM user, generate access keys, and store the keys in a configuration file on the EC2 instance

Answer

Store the AWS root user access keys on the instance so the application has full access

Answer

Embed IAM access keys directly in the application source code before deployment