SOA-C03 · Question #96
A CloudOps engineer is responsible for a company's disaster recovery procedures. The company has a source Amazon S3 bucket in a production account, and it wants to replicate objects from the source…
The correct answer is A. Modify the replication configuration to change object ownership to the destination S3 bucket. In cross-account S3 replication, by default, replicated objects are owned by the source account, which causes Access Denied errors when the destination account tries to access them. To resolve this, you must enable the “change object ownership to destination bucket owner”…
Question
A CloudOps engineer is responsible for a company’s disaster recovery procedures. The company has a source Amazon S3 bucket in a production account, and it wants to replicate objects from the source to a destination S3 bucket in a nonproduction account. The CloudOps engineer configures S3 cross-Region, cross-account replication to copy the source S3 bucket to the destination S3 bucket. When the CloudOps engineer attempts to access objects in the destination S3 bucket, they receive an Access Denied error. Which solution will resolve this problem?
Options
- AModify the replication configuration to change object ownership to the destination S3 bucket
- BEnsure that the replication rule applies to all objects in the source S3 bucket and is not scoped to
- CRetry the request when the S3 Replication Time Control (S3 RTC) has elapsed.
- DVerify that the storage class for the replicated objects did not change between the source S3
How the community answered
(20 responses)- A80% (16)
- B10% (2)
- C5% (1)
- D5% (1)
Explanation
In cross-account S3 replication, by default, replicated objects are owned by the source account, which causes Access Denied errors when the destination account tries to access them. To resolve this, you must enable the “change object ownership to destination bucket owner” option (using the AccessControlTranslation property in the replication configuration). This ensures the destination account owns the replicated objects and can access them without permission issues.
Topics
Community Discussion
No community discussion yet for this question.