A media company is launching a new product platform that artists from around the world can use to upload videos and images directly to an Amazon S3 bucket. The company owns and maintains the S3 bucket

Question

Options

• AEnable cross-origin resource sharing (CORS) on the S3 bucket.
• BTurn off block public access for the S3 bucket. Share the bucket URL to the artists to enable
• CUse an IAM role that has upload permissions for the S3 bucket to generate presigned URLs for
• DCreate a web interface that uses an IAM role that has permission to upload and view objects in

• A
  6% (1)
• B
  13% (2)
• C
  75% (12)
• D
  6% (1)

Explanation

Option C is the most secure and practical solution. Presigned URLs allow temporary, limited access to upload files to specific S3 prefixes. This ensures that artists can upload files securely without needing AWS credentials or accounts. Each artist receives a unique URL with permissions tied to the intended S3 location, and the URL can be configured to expire after a certain time, minimizing security risks. Why Other Options Are Incorrect: Option A: Enabling CORS allows cross-origin access but does not provide authentication or authorization for uploads. This does not secure the uploads or restrict access to specific artists. Option B: Turning off block public access and sharing the bucket URL exposes the bucket to potential misuse and unauthorized uploads. This approach is highly insecure. Option D: While a web interface might work, it introduces additional complexity and potential security risks by exposing upload functionality through a public-facing application.

No community discussion yet for this question.