DOP-C02 · Question #72
A security review has identified that an AWS CodeBuild project is downloading a database population script from an Amazon S3 bucket using an unauthenticated request. The security team does not allow u
The correct answer is C. Remove unauthenticated access from the S3 bucket with a bucket policy. Modify the service role. It involves removing unauthenticated access from the S3 bucket with a bucket policy, which ensures that only authorized users or services can access the bucket.
Question
A security review has identified that an AWS CodeBuild project is downloading a database population script from an Amazon S3 bucket using an unauthenticated request. The security team does not allow unauthenticated requests to S3 buckets for this project. How can this issue be corrected in the MOST secure manner?
Options
- AAdd the bucket name to the AllowedBuckets section of the CodeBuild project settings. Update the
- BModify the S3 bucket settings to enable HTTPS basic authentication and specify a token. Update
- CRemove unauthenticated access from the S3 bucket with a bucket policy. Modify the service role
- DRemove unauthenticated access from the S3 bucket with a bucket policy. Use the AWS CLI to
How the community answered
(51 responses)- A12% (6)
- B4% (2)
- C80% (41)
- D4% (2)
Explanation
It involves removing unauthenticated access from the S3 bucket with a bucket policy, which ensures that only authorized users or services can access the bucket.
Topics
Community Discussion
No community discussion yet for this question.