DEA-C01 · Question #299
A company stores time-series data that is collected from streaming services in an Amazon S3 bucket. The company must ensure that only workloads that are deployed within the company's VPC can access…
The correct answer is A. Create an S3 bucket policy that uses a condition to allow access only to traffic that originates from. An S3 bucket policy can restrict access to requests that come through a specific VPC endpoint by using a condition on the VPC endpoint (or VPC) context, ensuring only workloads running inside the company’s VPC (using that endpoint) can access the bucket.
Question
A company stores time-series data that is collected from streaming services in an Amazon S3 bucket. The company must ensure that only workloads that are deployed within the company’s VPC can access the data. Which solution will meet this requirement?
Options
- ACreate an S3 bucket policy that uses a condition to allow access only to traffic that originates from
- BApply a security group to the S3 bucket that allows connections only from the company's VPC
- CDefine an IAM policy that denies access to all users unless the request originates from within the
- DUse a network ACL on the VPC subnets to allow only specific resources to access the S3 bucket.
How the community answered
(36 responses)- A72% (26)
- B3% (1)
- C8% (3)
- D17% (6)
Explanation
An S3 bucket policy can restrict access to requests that come through a specific VPC endpoint by using a condition on the VPC endpoint (or VPC) context, ensuring only workloads running inside the company’s VPC (using that endpoint) can access the bucket.
Topics
Community Discussion
No community discussion yet for this question.