A cloud engineer needs to grant a Lambda function access to an S3 bucket without storing credentials in code. What is the best approach?
-
A
Hardcode IAM access keys in environment variables
-
B
Assign an IAM execution role to the Lambda function
-
C
Store credentials in AWS Secrets Manager and retrieve at runtime
-
D
Use a shared IAM user account for all Lambda functions