SOA-C02 · Question #338
A company maintains a large set of sensitive data in an Amazon S3 bucket. The company's security team asks a SyeOps administrator to help verify that all current objects in the S3 bucket are…
The correct answer is B. Create an S3 Inventory configuration on the S3 bucket Induce the appropriate status fields. Encryption status – Set to SSE-S3, SSE-C, SSE-KMS, or NOT-SSE. The server-side encryption status for SSE-S3, SSE-KMS, and SSE with customer-provided keys (SSE-C). A status of NOT- SSE means that the object is not encrypted with server-side encryption…
Question
A company maintains a large set of sensitive data in an Amazon S3 bucket. The company's security team asks a SyeOps administrator to help verify that all current objects in the S3 bucket are encrypted. What is the MOST operationally efficient solution that meets these requirements?
Options
- ACreate a script that runs against the S3 bucket and outputs the status of each object.
- BCreate an S3 Inventory configuration on the S3 bucket Induce the appropriate status fields.
- CProvide the security team with an IAM user that has read access to the S3 bucket.
- DUse the AWS CLI to output a list of all objects in the S3 bucket.
How the community answered
(33 responses)- A3% (1)
- B79% (26)
- C12% (4)
- D6% (2)
Explanation
Encryption status – Set to SSE-S3, SSE-C, SSE-KMS, or NOT-SSE. The server-side encryption status for SSE-S3, SSE-KMS, and SSE with customer-provided keys (SSE-C). A status of NOT- SSE means that the object is not encrypted with server-side encryption. https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-inventory.html
Topics
Community Discussion
No community discussion yet for this question.