A company updates its security policy to prohibit the public exposure of any data in Amazon S3 buckets in the company's account. What should a SysOps administrator do to meet this requirement?

The correct answer is A. Turn on S3 Block Public Access from the account level. Using Amazon S3 Block Public Access as a centralized way to limit public access. Block Public Access settings override bucket policies and object permissions. Be sure to enable Block Public Access for all accounts and buckets that you don't want publicly accessible.

Submitted by carter_n· Mar 30, 2026Security and Compliance

Question

Options

ATurn on S3 Block Public Access from the account level.
BCreate an Amazon EventBridge (Amazon CloudWatch Events) rule to enforce that all S3
CUse Amazon Inspector to search for S3 buckets and to automatically reset S3 ACLs if any
DUse S3 Object Lambda to examine S3 ACLs and to change any public S3 ACLs to private.

How the community answered

(27 responses)

A
74% (20)
B
7% (2)
C
4% (1)
D
15% (4)

Explanation

Using Amazon S3 Block Public Access as a centralized way to limit public access. Block Public Access settings override bucket policies and object permissions. Be sure to enable Block Public Access for all accounts and buckets that you don't want publicly accessible.

Topics

#S3 Block Public Access#data exposure prevention#S3 ACLs#account-level security

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice