Amazon Exam SOA-C01 Topic 11 Question 38 Discussion

Actual exam question for Amazon's SOA-C01 exam

Question #: 38
Topic #: 11

A sysops administrator is reviewing AWS Trusted Advisor warnings and encounters a warning for an S3 bucket policy that has open access permissions. While discussing the issue with the bucket owner, the administrator realizes the S3 bucket is an origin for an Amazon CloudFront web distribution.

AEncrypt the S3 bucket content with Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3).

BCreate an origin access identity and grant it permissions to read objects in the S3 bucket.

CAssign an 1AM user to the CloudFront distribution and whitelist the 1AM user in the S3 bucket policy.

DAssign an 1AM role to the CloudFront distribution and whitelist the 1AM role in the S3 bucket policy.

Show Suggested Answer

Suggested Answer: B

by Felicidad at May 08, 2022, 10:57 PM

Limited Time Offer

25%

Off

Get Premium SOA-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!