ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Associate SAA-C03 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C03 exam
Go to Exam

Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 478 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03
Question #: 478
Topic #: 1
[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A law firm needs to share information with the public. The information includes hundreds of files that must be publicly readable. Modifications or deletions of the files by anyone before a designated future date are prohibited.

Which solution will meet these requirements in the MOST secure way?

  • A. Upload all files to an Amazon S3 bucket that is configured for static website hosting. Grant read-only IAM permissions to any AWS principals that access the S3 bucket until the designated date.
  • B. Create a new Amazon S3 bucket with S3 Versioning enabled. Use S3 Object Lock with a retention period in accordance with the designated date. Configure the S3 bucket for static website hosting. Set an S3 bucket policy to allow read-only access to the objects.
  • C. Create a new Amazon S3 bucket with S3 Versioning enabled. Configure an event trigger to run an AWS Lambda function in case of object modification or deletion. Configure the Lambda function to replace the objects with the original versions from a private S3 bucket.
  • D. Upload all files to an Amazon S3 bucket that is configured for static website hosting. Select the folder that contains the files. Use S3 Object Lock with a retention period in accordance with the designated date. Grant read-only IAM permissions to any AWS principals that access the S3 bucket.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by nosense at May 19, 2023, 3:05 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Lin878
Highly Voted 10 months, 3 weeks ago
Selected Answer: B
Object Lock works only in buckets that have S3 Versioning enabled. https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock.html
upvoted 6 times
...
nosense
Highly Voted 1 year, 11 months ago
Selected Answer: B
Option A allows the files to be modified or deleted by anyone with read-only IAM permissions. Option C allows the files to be modified or deleted by anyone who can trigger the AWS Lambda function. Option D allows the files to be modified or deleted by anyone with read-only IAM permissions to the S3 bucket
upvoted 5 times
wizcloudifa
1 year ago
no it doesnt, did you not notice this part: "S3 Object Lock with a retention period in accordance with the designated date", this part avoids deletion/modification of files
upvoted 2 times
...
...
MatAlves
Most Recent 7 months, 3 weeks ago
Selected Answer: B
Versioning Enabled + Object Lock = B
upvoted 2 times
...
potomac
1 year, 6 months ago
Selected Answer: B
S3 bucket policy
upvoted 4 times
...
thanhnv142
1 year, 6 months ago
B is correct. A doesnot have S3 object lock, but deletion is prohibited, which implies object lock C does not have S3 as static web, but have to share the s3 with the public D mentions files - but S3 manages objects, not file
upvoted 2 times
...
hydro143
1 year, 6 months ago
D? Its like B, but also with read-only access limitations for anyone with IAM permissions. Also versioning in B doesn't help with anything.
upvoted 2 times
ManikRoy
12 months ago
Enabling versioning is a pre-requisite for object lock.
upvoted 2 times
...
...
Guru4Cloud
1 year, 8 months ago
Selected Answer: B
Create a new Amazon S3 bucket with S3 Versioning enabled. Use S3 Object Lock with a retention period in accordance with the designated date. Configure the S3 bucket for static website hosting. Set an S3 bucket policy to allow read-only access to the objects.
upvoted 3 times
...
TariqKipkemei
1 year, 10 months ago
Selected Answer: B
Create a new Amazon S3 bucket with S3 Versioning enabled. Use S3 Object Lock with a retention period in accordance with the designated date. Configure the S3 bucket for static website hosting. Set an S3 bucket policy to allow read-only access to the objects.
upvoted 4 times
...
antropaws
1 year, 11 months ago
Selected Answer: B
Clearly B.
upvoted 3 times
...
dydzah
1 year, 11 months ago
Selected Answer: B
https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock.html
upvoted 5 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago