SAA-C03 · Question #136
A media company hosts a web application on AWS for uploading videos. Only authenticated users should upload within a specified time frame after authentication. Which solution will meet these…
The correct answer is B. Create an AWS Lambda function that generates pre-signed URLs when a user authenticates. Option B: Pre-signed URLs provide temporary, authenticated access to S3, limiting uploads to the time frame specified. This solution is lightweight, efficient, and easy to implement. Option A requires the management of IAM temporary credentials, adding complexity. Option C…
Question
A media company hosts a web application on AWS for uploading videos. Only authenticated users should upload within a specified time frame after authentication. Which solution will meet these requirements with the LEAST operational overhead?
Options
- AConfigure the application to generate IAM temporary security credentials for authenticated users.
- BCreate an AWS Lambda function that generates pre-signed URLs when a user authenticates.
- CDevelop a custom authentication service that integrates with Amazon Cognito to control and log
- DUse AWS Security Token Service (AWS STS) to assume a pre-defined IAM role that grants
How the community answered
(25 responses)- A4% (1)
- B72% (18)
- C16% (4)
- D8% (2)
Explanation
Option B: Pre-signed URLs provide temporary, authenticated access to S3, limiting uploads to the time frame specified. This solution is lightweight, efficient, and easy to implement. Option A requires the management of IAM temporary credentials, adding complexity. Option C involves unnecessary development effort. Option D introduces more complexity with STS and roles than pre-signed URLs.
Community Discussion
No community discussion yet for this question.