Exam AWS Certified SysOps Administrator - Associate topic 1 question 372 discussion

I would go for B

D is wrong because null values on the property is not allowed. Hence B is correct.

Resources: MyS3Bucket: Type: AWS::S3::Bucket Properties: BucketName: !Sub "my-s3-bucket-${AWS::AccountId}-${AWS::Region}-${AWS::StackName}-${AWS::StackId}" AccessControl: Private # or the desired access control policy Encryption: ServerSideEncryptionConfiguration: - ServerSideEncryptionByDefault: SSEAlgorithm: AES256 # or any other encryption algorithm

I would go for B, for exam purpose, but as already said by ahrentom from beginning 2023 default encryption is enable by default: https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucket-encryption.html

I would go with D, because the default Bucket encrytion is always enabled with SSE-S3. I´ve checked this settings in my account. "BucketEncryption Specifies default encryption for a bucket using server-side encryption with Amazon S3-managed keys (SSE-S3), AWS KMS-managed keys (SSE-KMS), or dual-layer server-side encryption with KMS-managed keys (DSSE-KMS). " https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html

B since it doesnt specify NAME

B is the answer as it doesnt mention any name.

voting for B

Should be "B" is correct answer Random name is the key. "A" and "C" is specified S3 name, so both is not correct. "D" is also not because no encryption policy.

In C and A the bucket named DOC-EXAMPLE-BUCKET is created and it's wrong because bucket name only allows lowercase letters. "A name for the bucket. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the bucket name." in D the bucket created has a random name but encryption is not configured. The correct answer is B due that no contains the BucketName parameter and the encryption is configured. Source: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html

Option A specifies a static bucket name "DOC-EXAMPLE-BUCKET", but the requirement is for a randomly generated bucket name. Option C specifies only the bucket name, but it doesn't include encryption settings, and the requirement is for the bucket to be encrypted. Option D is an incomplete definition; it doesn't specify any properties, including the bucket name and encryption settings. Option B is the correct choice as it creates an S3 bucket with a randomly generated name and enables server-side encryption with AES256. The randomly generated bucket name is handled by AWS CloudFormation during the stack creation, and the bucket name will be unique for each stack.