A company runs an infrastructure monitoring service.

Amazon Web Services SAA-C03 Question Answer

A company runs an infrastructure monitoring service. The company is building a new feature that will enable the service to monitor data in customer AWS accounts. The new feature will call AWS APIs in customer accounts to describe Amazon EC2 instances and read Amazon CloudWatch metrics.

What should the company do to obtain access to customer accounts in the MOST secure way?

Ensure that the customers create an IAM role in their account with read-only EC2 and CloudWatch permissions and a trust policy to the company's account.

Create a serverless API that implements a token vending machine to provide temporary AWS credentials for a role with read-only EC2 and CloudWatch permissions.

Ensure that the customers create an IAM user in their account with read-only EC2 and CloudWatch permissions. Encrypt and store customer access and secret keys in a secrets management system.

Ensure that the customers create an Amazon Cognito user in their account to use an IAM role with read-only EC2 and CloudWatch permissions. Encrypt and store the Amazon Cognito user and password in a secrets management system.

Amazon Web Services SAA-C03 View All Questions

Amazon Web Services SAA-C03 Summary

Vendor: Amazon Web Services
Product: SAA-C03
Update on: Jul 31, 2025
Questions: 1168

Price: $52.5 ~~$149.99~~

Buy Now SAA-C03 PDF + Testing Engine Pack

A company wants to move from many standalone AWS accounts to a consolidated, multi-account architecture...

A company maintains an Amazon RDS database that maps users to cost centers.

Summer Special Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: vce65

A company runs an infrastructure monitoring service.

The Answer Is:

Explanation:

Amazon Web Services SAA-C03 Summary

Payments We Accept

Contact Us