nerdexam
Amazon

SAA-C03 · Question #580

A company wants to use an AWS CloudFormation stack for its application in a test environment. The company stores the CloudFormation template in an Amazon S3 bucket that blocks public access. The…

The correct answer is C. Create a presigned URL for the template object. Configure the CloudFormation stack to use the. https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html

Submitted by daniela_cl· Mar 4, 2026Design Secure Architectures

Question

A company wants to use an AWS CloudFormation stack for its application in a test environment. The company stores the CloudFormation template in an Amazon S3 bucket that blocks public access. The company wants to grant CloudFormation access to the template in the S3 bucket based on specific user requests to create the test environment. The solution must follow security best practices. Which solution will meet these requirements?

Options

  • ACreate a gateway VPC endpoint for Amazon S3. Configure the CloudFormation stack to use the
  • BCreate an Amazon API Gateway REST API that has the S3 bucket as the target. Configure the
  • CCreate a presigned URL for the template object. Configure the CloudFormation stack to use the
  • DAllow public access to the template object in the S3 bucket. Block the public access after the test

How the community answered

(28 responses)
  • A
    7% (2)
  • B
    11% (3)
  • C
    79% (22)
  • D
    4% (1)

Explanation

https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html

Community Discussion

No community discussion yet for this question.

Full SAA-C03 Practice