A Developer is testing a Docker-based application that uses the AWS SDK to interact with Amazon DynamoDB. In the local development environment, the application has used IAM access keys. The application is now ready for deployment onto an ECS cluster. How should the application authenticate with AWS services in production?
A) Configure an ECS task IAM role for the application to use
B) Refactor the application to call AWS STS AssumeRole based on an instance role
C) Configure AWS access key/secret access key environment variables with new credentials
D) Configure the credentials file with a new access key/secret access key

Question

Quizplus · Accepted Answer

Using an ECS task IAM role is the recommended way to provide applications running on ECS with the necessary permissions to interact with AWS services securely, without hardcoding credentials.

A Developer Is Testing a Docker-Based Application That Uses the AWS