Your company has a MySQL database deployed in an on-premise datacenter. You start using AWS Database Migration Service (AWS DMS) to migrate the database to AWS RDS. You have a replication instance in DMS to run the migration task. Which of the following options assign permissions that determine who is allowed to manage AWS DMS resources?

Answer options:

A.Transport Layer Security (TLS) connections between AWS DMS and local datacenter.
B.AWS Key Management Service (AWS KMS) encryption used by the replication instance.
C.AWS Identity and Access Management (IAM) policies.
D.Network Control Lists (NCLs) in VPC subnets.

Correct Answer – C
There are multiple approaches to secure the AWS DMS resources. Details can be found in
https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Security.html.
Option A is incorrect: TLS protects the network layer. However, it does not assign permissions.
Option B is incorrect: KMS encrypts data. But it cannot manage the permissions.
Option C is CORRECT: Because IAM policies can be assigned to IAM users who need to manage DMS resources.
Option D is incorrect: NCL acts as a firewall to protect the VPC subnets. But it does not determine who can access DMS resources.