DVA-C02 · Question #685
A company has an application where reading objects from Amazon S3 is based on the type of user. The user types are registered user and guest user. The company has 25,000 users and is growing…
The correct answer is C. Use Amazon Cognito to provide access using authenticated and unauthenticated roles. E. Use IAM and let the application assume the different roles by using the AWS STS AssumeRole. Using Amazon Cognito enables managing authenticated and unauthenticated users efficiently with roles that control access to S3. Using IAM roles with AWS STS AssumeRole allows the application to assume different roles dynamically based on user type, providing scalable and secure…
Question
A company has an application where reading objects from Amazon S3 is based on the type of user. The user types are registered user and guest user. The company has 25,000 users and is growing. Information is pulled from an S3 bucket depending on the user type. Which approaches are recommended to provide access to both user types? (Choose two.)
Options
- AProvide a different access key and secret access key in the application code for registered users
- BUse S3 bucket policies to restrict read access to specific IAM users.
- CUse Amazon Cognito to provide access using authenticated and unauthenticated roles.
- DCreate a new IAM user for each user and grant read access.
- EUse IAM and let the application assume the different roles by using the AWS STS AssumeRole
How the community answered
(24 responses)- A8% (2)
- B13% (3)
- C58% (14)
- D21% (5)
Explanation
Using Amazon Cognito enables managing authenticated and unauthenticated users efficiently with roles that control access to S3. Using IAM roles with AWS STS AssumeRole allows the application to assume different roles dynamically based on user type, providing scalable and secure access control.
Community Discussion
No community discussion yet for this question.