DBS-C01 Deployment and Migration Practice Question
Exhibit
Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"rds:CreateDBInstance",
"rds:CreateDBSnapshot",
"rds:RestoreDBInstanceFromDBSnapshot"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "dms:CreateReplicationTask",
"Resource": "*"
}
]
}Refer to the exhibit. A company is creating an IAM policy for a migration engineer who needs to perform a database migration from an on-premises SQL Server to Amazon RDS for SQL Server using AWS DMS. The policy is attached to the engineer's IAM user. Which additional permission is required for the engineer to create a DMS replication instance?
⚠ Common exam trap
It's easy for candidates to assume DMS replication instances are fully managed by AWS and require no EC2 permissions, but in reality DMS provisions EC2 instances in the customer's account, making ec2:RunInstances a mandatory permission.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ec2:CreateInstance (or equivalent)
To create a DMS replication instance, AWS DMS launches an Amazon EC2 instance in the customer's VPC to run the replication engine. The IAM user must have permission to call ec2:RunInstances (or the equivalent ec2:CreateInstance action) to provision this underlying compute resource. Without this EC2 permission, the DMS service cannot spin up the replication instance, and the migration engineer will receive an authorization error.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
kms:CreateKey
Why it's wrong here
KMS permissions are optional for encryption, not required for creating the instance.
- ✗
dms:CreateEndpoint
Why it's wrong here
Creating endpoints does not require EC2 permissions.
- ✗
s3:PutObject
Why it's wrong here
S3 permissions are not needed for creating a replication instance.
- ✓
ec2:CreateInstance (or equivalent)
Why this is correct
DMS replication instances require EC2 permissions to be created.
Go deeper
Related to this question
About these practice questions
Courseiva writes every DBS-C01 question from scratch — 1,663 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DBS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DBS-C01 exam.