Allowing EC2 Application to Write Data to DynamoDB

Answer - A and B.

The AWS documentation mentions the following.

We designed IAM roles so that your applications can securely make API requests from your instances, without requiring you to manage the security credentials that the applications use.

Instead of creating and distributing your AWS credentials, you can delegate permission to make API requests using IAM roles

For more information on IAM Roles, please refer to the below URL:

The two correct answers are A and B.

To allow an application deployed on an EC2 instance to write data to a DynamoDB table, you can use an IAM role. IAM roles are temporary security credentials that can be assumed by EC2 instances, applications, or services in order to access AWS resources securely.

Here's how you would set up an IAM role to allow write access to a DynamoDB table:

A. Create an IAM Role that allows write access to the DynamoDB table.

1. Open the AWS Management Console and navigate to the IAM dashboard.
2. Click on "Roles" in the left-hand menu.
3. Click the "Create role" button.
4. Select "AWS service" as the trusted entity.
5. Choose the EC2 service as the service that will use this role.
6. Click "Next: Permissions".
7. Search for the policy "AmazonDynamoDBFullAccess" and select it.
8. Click "Next: Tags" and then "Next: Review".
9. Give the role a name and description.
10. Click "Create role".

B. Add an IAM Role to a running EC2 instance.

1. Open the EC2 console.
2. Select the instance you want to add the role to.
3. Click the "Actions" button and select "Instance settings".
4. Click "Attach/Replace IAM role".
5. Select the IAM role you created in step A.
6. Click "Apply".

After completing these steps, the EC2 instance will have the necessary permissions to write data to the DynamoDB table using the IAM role you created.

Option C and D are not correct because IAM users are meant for human users and are not suitable for granting access to applications running on EC2 instances. IAM roles are the recommended way to grant permissions to EC2 instances, as they can be easily managed and rotated without requiring changes to the EC2 instances themselves.