SCS-C02 · Question #308
SCS-C02 Question #308: Real Exam Question with Answer & Explanation
The correct answer is B: Use Pre-signed URL's. The AWS Documentation mentions the following All objects by default are private. Only the object owner has permission to access these objects. However, the object owner can optionally share objects with others by creating a pre-signed URL using their own security credentials, to
Question
You have an S3 bucket hosted in AWS. This is used to host promotional videos uploaded by yourself. You need to provide access to users for a limited duration of time. How can this be achieved?
Options
- AUse versioning and enable a timestamp for each version
- BUse Pre-signed URL's
- CUse IAM Roles with a timestamp to limit the access
- DUse IAM policies with a timestamp to limit the access
Explanation
The AWS Documentation mentions the following All objects by default are private. Only the object owner has permission to access these objects. However, the object owner can optionally share objects with others by creating a pre-signed URL using their own security credentials, to grant time-limited permission to download the objects. Option A is invalid because this can be used to prevent accidental deletion of objects Option C is invalid because timestamps are not possible for Roles Option D is invalid because policies is not the right way to limit access based on time https://docs.aws.ama2on.com/AmazonS3/latest/dev/ShareObiectPreSisnedURL.htm
Community Discussion
No community discussion yet for this question.