SAA-C03 · Question #750
A company has stored a file in an Amazon S3 bucket. The file contains IP address allow lists and IP address deny lists. The company needs to be able to access the file by using an HTTP endpoint. The…
The correct answer is B. Create a bucket policy that explicitly allows access from only the firewall IP addresses. Add the. A bucket policy can explicitly allow access to the file only from the specified firewall IP addresses. This approach works with S3 Block Public Access enabled and provides a direct HTTP URL that the firewalls can use to retrieve the file while restricting access to only…
Question
A company has stored a file in an Amazon S3 bucket. The file contains IP address allow lists and IP address deny lists. The company needs to be able to access the file by using an HTTP endpoint. The company’s firewalls, which are not deployed on AWS, need to be able to read the file. The company wants to restrict access to the file to only the firewall IP addresses. The company has configured the Amazon S3 Block Public Access feature for this AWS account. Which solution meets these requirements?
Options
- AConfigure the S3 bucket as a static website. Create a bucket policy that restricts website access
- BCreate a bucket policy that explicitly allows access from only the firewall IP addresses. Add the
- CCreate an Amazon CloudFront distribution. Add the S3 bucket as the origin. Create an origin
- DCreate an AWS Lambda function that has access to the file. Configure the Lambda function to
How the community answered
(49 responses)- A14% (7)
- B76% (37)
- C4% (2)
- D6% (3)
Explanation
A bucket policy can explicitly allow access to the file only from the specified firewall IP addresses. This approach works with S3 Block Public Access enabled and provides a direct HTTP URL that the firewalls can use to retrieve the file while restricting access to only authorized IPs.
Community Discussion
No community discussion yet for this question.