Least Privilege with IAM
An application on a virtual machine needs to read objects from one storage bucket. What is the recommended way to give it access?
Choose one answer
Share the root account's password with the application team.
Make the bucket public.
Attach a role to the instance with a policy that allows only s3:GetObject on that bucket.
s3:GetObject
Store an administrator user's access keys in the application's config file.