Amazon
SAA-C03 · Question #577
A company manages a data lake in an Amazon S3 bucket that numerous applications access. The S3 bucket contains a unique prefix for each application. The company wants to restrict each application to…
The correct answer is A. Create dedicated S3 access points and access point policies for each application. https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-policies.html
Submitted by lucia.co· Mar 4, 2026Design Secure Architectures
Question
A company manages a data lake in an Amazon S3 bucket that numerous applications access. The S3 bucket contains a unique prefix for each application. The company wants to restrict each application to its specific prefix and to have granular control of the objects under each prefix. Which solution will meet these requirements with the LEAST operational overhead?
Options
- ACreate dedicated S3 access points and access point policies for each application.
- BCreate an S3 Batch Operations job to set the ACL permissions for each object in the S3 bucket.
- CReplicate the objects in the S3 bucket to new S3 buckets for each application. Create replication
- DReplicate the objects in the S3 bucket to new S3 buckets for each application. Create dedicated
How the community answered
(44 responses)- A80% (35)
- B2% (1)
- C5% (2)
- D14% (6)
Explanation
https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-policies.html
Community Discussion
No community discussion yet for this question.