Which method would be the best way to authenticate your CloudWatch PUT request?

You are creating an Auto Scaling group whose Instances need to insert a custom metric into CloudWatch.

Which method would be the best way to authenticate your CloudWatch PUT request?
A . Create an IAM role with the Put MetricData permission and modify the Auto Scaling launch configuration to launch instances in that role
B . Create an IAM user with the PutMetricData permission and modify the Auto Scaling launch configuration to inject the userscredentials into the instance User Data
C . Modify the appropriate Cloud Watch metric policies to allow the Put MetricData permission to instances from the Auto Scaling group
D . Create an IAM user with the PutMetricData permission and put the credentials in a private repository and have applications on the server pull the credentials as needed

View Answer

Answer: A

Explanation:

Creates an IAM role is always the best practice to give permissions to EC2 instances in order to interact with other AWS services