A company runs an application on Amazon EC2 instances.

Vendor: Amazon Web Services
Product: SAA-C03
Update on: Jan 16, 2026
Questions: 649

Amazon Web Services SAA-C03 Question Answer

A company runs an application on Amazon EC2 instances. The instances need to access an Amazon RDS database by using specific credentials. The company uses AWS Secrets Manager to contain the credentials the EC2 instances must use. Which solution will meet this requirement?

Create an IAM role, and attach the role to each EC2 instance profile. Use an identity-based policy to grant the new IAM role access to the secret that contains the database credentials.

Create an IAM user, and attach the user to each EC2 instance profile. Use a resource-based policy to grant the new IAM user access to the secret that contains the database credentials.

Create a resource-based policy for the secret that contains the database credentials. Use EC2 Instance Connect to access the secret.

Create an identity-based policy for the secret that contains the database credentials. Grant direct access to the EC2 instances.