CLF-C02 Question 120
Select 3A company is building a web application on AWS and wants to ensure the security of its data and resources. Which of the following AWS services or features should the company use to manage security best practices?
- A
AWS Identity and Access Management (IAM)
- B
Amazon CloudFront
- C
AWS Shield
- D
Amazon S3 Bucket Policies
- E
AWS Trusted Advisor Security Checks
Show answer and explanation
Correct answers: A, D, E
Explanation
AWS Identity and Access Management (IAM), Amazon S3 Bucket Policies, and AWS Trusted Advisor Security Checks are key security tools that help manage access control, data protection, and compliance with security best practices. While CloudFront and AWS Shield contribute to security in specific scenarios, they are not primarily used for managing overall security best practices in AWS.
- A. Correct.
AWS Identity and Access Management (IAM) is a core service for managing access to AWS resources securely by creating users, groups, and roles with specific permissions.
- B. Incorrect.
Amazon CloudFront is a content delivery network (CDN) service that helps improve performance and security for delivering data, but it is not directly used for managing security best practices.
- C. Incorrect.
AWS Shield is a managed DDoS protection service, which helps protect against certain types of attacks but does not directly manage general security best practices.
- D. Correct.
Amazon S3 Bucket Policies are essential for defining fine-grained access controls and securing data stored in S3 buckets.
- E. Correct.
AWS Trusted Advisor Security Checks provide recommendations and insights to help improve security, including checking for overly permissive IAM roles or unencrypted data.