SCS-C02 · Question #275
A company's security engineer is configuring Amazon S3 permissions to ban all current and future public buckets. However, the company hosts several websites directly off S3 buckets with public…
The correct answer is A. Configure an S3 bucket as the origin an origin access identity (OAI) for the CloudFront distribution. Amazon S3 is the only object storage service that allows you to block public access to all of your objects at the bucket or the account level, now and in the future by using S3 Block Public Access.
Question
A company's security engineer is configuring Amazon S3 permissions to ban all current and future public buckets. However, the company hosts several websites directly off S3 buckets with public access enabled. The engineer needs to bock me pubic S3 buckets without causing any outages on me easting websites. The engineer has set up an Amazon CloudFrom distribution (or each website. Which set or steps should the security engineer implement next?
Options
- AConfigure an S3 bucket as the origin an origin access identity (OAI) for the CloudFront distribution
- BConfigure an S3 bucket as the origin with an origin access identity (OAI) for the CloudFront
- CConfigure an S3 bucket as the origin with an origin access identity (OAI) for the CloudFront
- DConfigure an S3 bucket as the origin for me CloudFront distribution.
How the community answered
(44 responses)- A73% (32)
- B7% (3)
- C16% (7)
- D5% (2)
Explanation
Amazon S3 is the only object storage service that allows you to block public access to all of your objects at the bucket or the account level, now and in the future by using S3 Block Public Access.
Topics
Community Discussion
No community discussion yet for this question.