Your application Amazon Elastic Compute Cloud (EC2) instances bootstrap by using a master configuration file that is kept in a version-enabled Amazon Simple Storage Service (S3) bucket. Which one of the following methods should you use to securely install the current configuration version onto the instances in a cost-effective way?
A) Create an Amazon DynamoDB table to store the different versions of the configuration file. Associate AWS Identity and Access Management (IAM) EC2 roles to the Amazon EC2 instances, and reference the DynamoDB table to get the latest file from Amazon Simple Storage Service (S3).
B) Associate an IAM S3 role to the bucket, list the object versions using the Amazon S3 API, and then get the latest object.
C) Associate an IAM EC2 role to the instances, list the object versions using the Amazon S3 API, and then get the latest object.
D) Associate an IAM EC2 role to the instances, and then simply get the object from Amazon S3, because the default is the current version.
E) Store the IAM credentials in the Amazon EC2 user data for each instance, and then simply get the object from S3, because the default is the current version.

Question

Quizplus · Accepted Answer

Associating an IAM EC2 role to the instances allows them to securely access the S3 bucket. By default, accessing an object in a version-enabled S3 bucket retrieves the current version, making it cost-effective and straightforward.

Your Application Amazon Elastic Compute Cloud (EC2) Instances Bootstrap by Using