Answer: IAM role

The best practice for granting a web application access to AWS services is to use an IAM role. IAM roles allow the application to assume the role and obtain temporary security credentials, which can then be used to make authorized API requests to AWS services on behalf of the application. This approach eliminates the need to embed long-term access keys or IAM user credentials in the application code, reducing the risk of accidental exposure or misuse. IAM roles also enable the definition of fine-grained permissions and policies, ensuring that the web application only has access to the necessary AWS services and resources required for its functionality, thus adhering to the principle of least privilege.

Author: LeetQuiz Editorial Team