Answer-first summary for fast verification
Answer: Assign a Lambda execution role with a policy granting minimal S3 object access.
The correct answer is C. Creating a Lambda function execution role and attaching a policy that grants access to specific objects in the S3 bucket is the most secure approach. This method follows the principle of least privilege by providing only the necessary permissions for the Lambda function. Additionally, it uses AWS's built-in mechanisms for handling temporary credentials, eliminating the need to manage access keys directly.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
How should a developer securely configure AWS Lambda access to specific confidential S3 objects following the principle of least privilege?
A
Embed credentials in application code for S3 access.
B
Utilize AWS Secrets Manager to store and retrieve access keys for S3.
C
Assign a Lambda execution role with a policy granting minimal S3 object access.
D
Store access keys as environment variables in Lambda for S3 access.
No comments yet.