AWS Certified SAP on AWS – Specialty (PAS-C01) — Question 9

A company is running an SAP HANA database on AWS. The company is running AWS Backint Agent for SAP HANA (AWS Backint agent) on an Amazon EC2 instance. AWS Backint agent is configured to back up to an Amazon S3 bucket. The backups are failing with an AccessDenied error in the AWS Backint agent log file.
What should an SAP basis administrator do to resolve this error?

Answer options

• A. Assign execute permissions at the operating system level for the AWS Backint agent binary and for AWS Backint agent.
• B. Assign an IAM role to an EC2 instance. Attach a policy to the IAM role to grant access to the target S3 bucket.
• C. Assign the correct Region ID for the S3BucketAwsRegion parameter in AWS Backint agent for the SAP HANA configuration file.
• D. Assign the value for the EnableTagging parameter in AWS Backint agent for the SAP HANA configuration file.

Correct answer: B

Explanation

The correct answer is B because assigning an IAM role with the appropriate policy directly grants the required permissions to access the S3 bucket, which is necessary to resolve the AccessDenied error. The other options do not address the permission issue related to S3 access, making them ineffective in resolving the problem.