nerdexam
Amazon

SOA-C02 · Question #519

A SysOps administrator wants to securely share an object from a private Amazon S3 bucket with a group of users who do not have an AWS account. What is the MOST operationally efficient solution that…

The correct answer is D. Generate a presigned URL for the object. Share the URL with the users. https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html

Submitted by chiamaka_o· Mar 30, 2026Security and Compliance

Question

A SysOps administrator wants to securely share an object from a private Amazon S3 bucket with a group of users who do not have an AWS account. What is the MOST operationally efficient solution that will meet this requirement?

Options

  • AAttach an S3 bucket policy that only allows object downloads from the users' IP addresses.
  • BCreate an IAM role that has access to the object. Instruct the users to assume the role.
  • CCreate an IAM user that has access to the object. Share the credentials with the users.
  • DGenerate a presigned URL for the object. Share the URL with the users.

How the community answered

(52 responses)
  • A
    6% (3)
  • B
    13% (7)
  • C
    4% (2)
  • D
    77% (40)

Explanation

https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html

Topics

#S3 presigned URL#private bucket access#object sharing#access control

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice