AWS Certified Developer Associate DVA-C01 – Question346

A developer is building an application that will run on Amazon EC2 instances. The application needs to connect to an Amazon DynamoDB table to read and write records. The security team must periodically rotate access keys.
Which approach will satisfy these requirements?

A.
Create an IAM role with read and write access to the DynamoDB table. Generate access keys for the user and store the access keys in the application as environment variables.
B. Create an IAM user with read and write access to the DynamoDB table. Store the user name and password in the application and generate access keys using an AWS SDK.
C. Create an IAM role, configure read and write access for the DynamoDB table, and attach to the EC2 instances.
D. Create an IAM user with read and write access to the DynamoDB table. Generate access keys for the user and store the access keys in the application as a credentials file.

Correct Answer: D