When it comes to API credentials, what is the best practise recommended by AWS?
A.
Create a role which has the necessary and can be assumed by the EC2 instance.
B.
Use the API credentials from an EC2 instance.
C.
Use the API credentials from a bastion host.
D.
Use the API credentials from a NAT Instance.
Explanation:
A
http://docs.aws.amazon.com/general/latest/gr/aws-access-keys-best-practices.html
A
wrong answer-text:
I guess “can be assumed by the EC2 instance” should be
“can be assigned by the EC2 instance”
its A .. you have to assign role to the ec2 to be more secure