A company has an application that generates reports and stores them in an Amazon S3 bucket. When a user accesses their report, the application generates a signed URL to allow the user to download the

Question

Options

• ACreate an AWS Lambda function that applies a deny all policy for users who are not
• BReview the AWS Trusted Advisor bucket permissions check and implement the recommended
• CRun a script that puts a private ACL on all of the objects in the bucket.
• DUse the Block Public Access feature in Amazon S3 to set the IgnorePublicAcIs option to TRUE on

• A
  18% (5)
• B
  7% (2)
• C
  4% (1)
• D
  71% (20)

Explanation

Amazon S3 Block Public Access provides settings for access points, buckets, and accounts to help you manage public access to Amazon S3 resources. By default, new buckets, access points, and objects don't allow public access, but users or applications can modify bucket policies or object permissions to allow public access. S3 Block Public Access settings override these public access settings. You can use S3 Block Public Access to block existing public access, whether specified by an ACL or a policy, and to ensure that public access isn't granted to newly created items. Using signed URLs to grant temporary access to the S3 objects is a secure way to share files. It allows the company to continue using their current workflow without affecting its users while also maintaining the privacy and security of the files in the bucket.

No community discussion yet for this question.