DEA-C01 Question #61: Real Exam Question with Answer & Explanation

Question

In a data engineering pipeline, a company is using multiple applications and teams to access a shared Amazon S3 bucket. To streamline access and simplify permissions management for these different entities, which S3 feature should the company utilize?

Options

• AEnable multiple IAM roles, each corresponding to an application or team, granting access to the
• BUse S3 Access Points to create unique endpoints with tailored permissions for each application or
• CActivate S3 Transfer Acceleration for the bucket to ensure fast and differentiated access for each
• DImplement S3 Lifecycle policies for each application or team to manage their specific data access

Explanation

To streamline access and simplify permissions management for multiple applications and teams accessing a shared Amazon S3 bucket, S3 Access Points should be utilized.

Common mistakes.

• A. While using multiple IAM roles is necessary for defining permissions, it doesn't inherently streamline access or simplify permission management for various entities to a shared S3 bucket in the way S3 Access Points do by providing distinct, dedicated endpoints.
• C. S3 Transfer Acceleration is a feature designed to speed up large data transfers over long distances by using AWS Edge Locations, and it is unrelated to simplifying access or managing permissions for different applications or teams.
• D. S3 Lifecycle policies are used to manage the lifecycle of objects in a bucket, such as transitioning them to different storage classes or expiring them, and they do not address access control or permission management.

Concept tested. S3 Access Points for shared bucket access

Reference. https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html

No community discussion yet for this question.