What is the recommended way to grant an EC2 instance permission to call other AWS services (like S3 or DynamoDB)?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Assign an IAM Role to the instance via an Instance Profile

IAM Roles for EC2 provide temporary, rotating credentials that are much more secure than long-term access keys....

📋Part of AWS Certified Solutions Architect – Associate (SAA-C03) · AWS Certification Practice
Real Exam ScenarioAWS IAM

What is the recommended way to grant an EC2 instance permission to call other AWS services (like S3 or DynamoDB)?

✓ Correct Answer & ExplanationAWS IAM

Correct Answer

Assign an IAM Role to the instance via an Instance Profile

Why This Answer Is Correct

IAM Roles for EC2 provide temporary, rotating credentials that are much more secure than long-term access keys.

📚 What This Question Tests

This question evaluates your knowledge of AWS IAM — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding AWS IAM is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.