Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 144 discussion

Exam question from Amazon's AWS Certified Developer - Associate DVA-C02

Question #: 144
Topic #: 1

[All AWS Certified Developer - Associate DVA-C02 Questions]

A company has an Amazon S3 bucket containing premier content that it intends to make available to only paid subscribers of its website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure of the premier content to non-paying website visitors.

How can the company limit the ability to download a premier content file in the S3 bucket to paid subscribers only?

A. Apply a bucket policy that allows anonymous users to download the content from the S3 bucket.
B. Generate a pre-signed object URL for the premier content file when a paid subscriber requests a download.
C. Add a bucket policy that requires multi-factor authentication for requests to access the S3 bucket objects.
D. Enable server-side encryption on the S3 bucket for data protection against the non-paying website visitors.

Show Suggested Answer

Suggested Answer: B 🗳️

by fordiscussionstwo at Oct. 6, 2023, 1:33 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

BrainFried

11 months, 2 weeks ago

Selected Answer: C

The answer is NOT B. The question states "limit the ABILITY TO DOWNLOAD a file in the S3 bucket to PAID SUBS ONLY" If you choose B, it means that a paid sub can request the URL and then SHARE IT with non-paying customers. This will mean non-paying customers can DOWNLOAD the file using the URL. The answer should be C - this enforces the user who downloads the file is a paying customer.

upvoted 1 times

...

65703c1

1 year, 1 month ago

Selected Answer: B

B is the correct answer.

upvoted 2 times

...

SerialiDr

1 year, 5 months ago

Selected Answer: B

B. Generate a pre-signed object URL for the premier content file when a paid subscriber requests a download: This is the most appropriate solution. A pre-signed URL grants temporary access to a private object stored in S3. The URL can be generated programmatically, and its validity can be limited to a short duration. This approach allows only those who have been provided with the URL (paid subscribers, in this case) to download the specific content.

upvoted 3 times

...

Digo30sp

1 year, 9 months ago

Selected Answer: B

The correct answer is (B). By generating a pre-signed object URL for the main content file when a paid subscriber requests a download, the company can control who can download the file. The pre-signed object URL will be valid for a limited period of time and can only be used by the paid subscriber who requested the download.

upvoted 4 times

...