DOP-C02 · Question #38
A company is using an AWS CodeBuild project to build and package an application. The packages are copied to a shared Amazon S3 bucket before being deployed across multiple AWS accounts. The buildspec.
Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #38. The question stem and answer options stay visible for context.
Question
A company is using an AWS CodeBuild project to build and package an application. The packages are copied to a shared Amazon S3 bucket before being deployed across multiple AWS accounts. The buildspec.yml file contains the following:
The DevOps engineer has noticed that anybody with an AWS account is able to download the artifacts. What steps should the DevOps engineer take to stop this?
Options
- AModify the post_build command to use --acl public-read and configure a bucket policy that grants
- BConfigure a default ACL for the S3 bucket that defines the set of authenticated users as the
- CCreate an S3 bucket policy that grants read access to the relevant AWS accounts and denies
- DModify the post_build command to remove --acl authenticated-read and configure a bucket policy
Unlock DOP-C02 to see the answer
You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.