nerdexam
Amazon

DEA-C01 · Question #61

In a data engineering pipeline, a company is using multiple applications and teams to access a shared Amazon S3 bucket. To streamline access and simplify permissions management for these different…

The correct answer is B. Use S3 Access Points to create unique endpoints with tailored permissions for each application or. To streamline access and simplify permissions management for multiple applications and teams accessing a shared Amazon S3 bucket, S3 Access Points should be utilized.

Data Security and Governance

Question

In a data engineering pipeline, a company is using multiple applications and teams to access a shared Amazon S3 bucket. To streamline access and simplify permissions management for these different entities, which S3 feature should the company utilize?

Options

  • AEnable multiple IAM roles, each corresponding to an application or team, granting access to the
  • BUse S3 Access Points to create unique endpoints with tailored permissions for each application or
  • CActivate S3 Transfer Acceleration for the bucket to ensure fast and differentiated access for each
  • DImplement S3 Lifecycle policies for each application or team to manage their specific data access

How the community answered

(36 responses)
  • A
    17% (6)
  • B
    69% (25)
  • C
    8% (3)
  • D
    6% (2)

Why each option

To streamline access and simplify permissions management for multiple applications and teams accessing a shared Amazon S3 bucket, S3 Access Points should be utilized.

AEnable multiple IAM roles, each corresponding to an application or team, granting access to the

While using multiple IAM roles is necessary for defining permissions, it doesn't inherently streamline access or simplify permission management for various entities to a shared S3 bucket in the way S3 Access Points do by providing distinct, dedicated endpoints.

BUse S3 Access Points to create unique endpoints with tailored permissions for each application orCorrect

S3 Access Points allow creation of unique hostnames with distinct access policies and network controls for each application or team, simplifying the management of granular permissions for a shared S3 bucket without altering the bucket policy.

CActivate S3 Transfer Acceleration for the bucket to ensure fast and differentiated access for each

S3 Transfer Acceleration is a feature designed to speed up large data transfers over long distances by using AWS Edge Locations, and it is unrelated to simplifying access or managing permissions for different applications or teams.

DImplement S3 Lifecycle policies for each application or team to manage their specific data access

S3 Lifecycle policies are used to manage the lifecycle of objects in a bucket, such as transitioning them to different storage classes or expiring them, and they do not address access control or permission management.

Concept tested: S3 Access Points for shared bucket access

Source: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html

Topics

#S3 Access Points#Permissions Management#Data Access Control#S3

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full DEA-C01 Practice