nerdexam
Amazon

SAA-C03 · Question #130

A company creates operations data and stores the data in an Amazon S3 bucket for the company's annual audit, an external consultant needs to access an annual report that is stored in the S3 bucket…

The correct answer is D. Generate a presigned URL that has the required access to the location of the report on the S3. Apresigned URLallows temporary access to a specific object in an S3 bucket without needing to make the bucket public or creating and managing additional IAM users. The URL is time-limited, and permissions are granted only to the specific object (in this case, the annual…

Submitted by suresh_in· Mar 4, 2026Design Cost-Optimized Architectures

Question

A company creates operations data and stores the data in an Amazon S3 bucket for the company's annual audit, an external consultant needs to access an annual report that is stored in the S3 bucket. The external consultant needs to access the report for 7 days. The company must implement a solution to allow the external consultant access to only the report. Which solution will meet these requirements with the MOST operational efficiency?

Options

  • ACreate a new S3 bucket that is configured to host a public static website. Migrate the operations
  • BEnable public access to the S3 bucket for 7 days. Remove access to the S3 bucket when the
  • CCreate a new IAM user that has access to the report in the S3 bucket. Provide the access keys to
  • DGenerate a presigned URL that has the required access to the location of the report on the S3

How the community answered

(20 responses)
  • A
    10% (2)
  • B
    5% (1)
  • C
    5% (1)
  • D
    80% (16)

Explanation

Apresigned URLallows temporary access to a specific object in an S3 bucket without needing to make the bucket public or creating and managing additional IAM users. The URL is time-limited, and permissions are granted only to the specific object (in this case, the annual report), making it a highly secure and operationally efficient solution. With a presigned URL, the consultant can access the report for the specified duration (7 days), after which the URL will expire automatically, removing the need for manual intervention to

Community Discussion

No community discussion yet for this question.

Full SAA-C03 Practice