A company stores critical data in an S3 bucket. There is a requirement to ensure that an extra level of security is added to the S3 bucket. In addition , it should be ensured that objects are…

Question

Exhibit

Options

• AEnable bucket versioning and also enable CRR
• BEnable bucket versioning and enable Master Pays
• CFor the Bucket policy add a condition for {"Null": {"aws:MultiFactorAuthAge": true}} i
• DEnable the Bucket ACL and add a condition for {"Null": {"aws:MultiFactorAuthAge": true}}

• A
  78% (21)
• B
  7% (2)
• D
  15% (4)

Explanation

The AWS Documentation mentions the following Adding a Bucket Policy to Require MFA Amazon S3 supports MFA-protected API access, a feature that can enforce multi-factor authentication (MFA) for access to your Amazon S3 resources. Multi-factor authentication provides an extra level of security you can apply to your AWS environment. It is a security feature that requires users to prove physical possession of an MFA device by providing a valid MFA code. For more information, go to AWS Multi-Factor Authentication. You can require MFA authentication for any requests to access your Amazoi. S3 resources. You can enforce the MFA authentication requirement using the aws:MultiFactorAuthAge key in a bucket policy. IAM users car access Amazon S3 resources by using temporary credentials issued by the AWS Security Token Service (STS). You provide the MFA code at the time of the STS request. When Amazon S3 receives a request with MFA authentication, the aws:MultiFactorAuthAge key provides a numeric value indicating how long ago (in seconds) the temporary credential was created. If the temporary credential provided in the request was not created using an MFA device, this key value is null (absent). In a bucket policy, you can add a condition to check this value, as shown in the following example bucket policy. The policy denies any Amazon S3 operation on the /taxdocuments folder in the examplebucket bucket if the request is not MFA authenticated. To learn more about MFA authentication, see Using Multi- Factor Authentication (MFA) in AWS in the IAM User Guide. Option B is invalid because just enabling bucket versioning will not guarantee replication of Option D is invalid because the condition for the bucket policy needs to be set accordingly https://docs.aws.amazon.com/AmazonS3/ latest/dev/example-bucket-policies.html

No community discussion yet for this question.