ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Professional SAP-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional SAP-C02 exam
Go to Exam

Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 378 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional SAP-C02
Question #: 378
Topic #: 1
[All AWS Certified Solutions Architect - Professional SAP-C02 Questions]

A company has a web application that securely uploads pictures and videos to an Amazon S3 bucket. The company requires that only authenticated users are allowed to post content. The application generates a presigned URL that is used to upload objects through a browser interface. Most users are reporting slow upload times for objects larger than 100 MB.

What can a solutions architect do to improve the performance of these uploads while ensuring only authenticated users are allowed to post content?

  • A. Set up an Amazon API Gateway with an edge-optimized API endpoint that has a resource as an S3 service proxy. Configure the PUT method for this resource to expose the S3 PutObject operation. Secure the API Gateway using a COGNITO_USER_POOLS authorizer. Have the browser interface use API Gateway instead of the presigned URL to upload objects.
  • B. Set up an Amazon API Gateway with a regional API endpoint that has a resource as an S3 service proxy. Configure the PUT method for this resource to expose the S3 PutObject operation. Secure the API Gateway using an AWS Lambda authorizer. Have the browser interface use API Gateway instead of the presigned URL to upload objects.
  • C. Enable an S3 Transfer Acceleration endpoint on the S3 bucket. Use the endpoint when generating the presigned URL. Have the browser interface upload the objects to this URL using the S3 multipart upload API.
  • D. Configure an Amazon CloudFront distribution for the destination S3 bucket. Enable PUT and POST methods for the CloudFront cache behavior. Update the CloudFront origin to use an origin access identity (OAI). Give the OAI user 3: PutObject permissions in the bucket policy. Have the browser interface upload objects using the CloudFront distribution.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by cypkir at Nov. 22, 2023, 7:53 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
thala
Highly Voted 1 year, 5 months ago
Selected Answer: C
Considering the primary concern of improving upload performance for large files while maintaining secure access for authenticated users, Option C (Enable S3 Transfer Acceleration and use it in the presigned URL) is the most suitable solution. It directly addresses the issue of slow uploads for large objects by leveraging CloudFront’s edge locations for accelerated data transfer to S3, and it works seamlessly with the existing mechanism of generating presigned URLs for authenticated users.
upvoted 5 times
...
tmlong18
Highly Voted 1 year, 3 months ago
Selected Answer: C
A is wrong. The limit of API Gateway payload is 10MB
upvoted 5 times
...
874def1
Most Recent 3 weeks, 1 day ago
Selected Answer: C
A, B out because API gateway cannot handle 100MB, they can handle 10MB limits. C => faster uploads = S3 transfer acceleration. I assume that user is authenticated separately. D is out because - CLoudfront does support uploads. However, Cloudfront is for caching the content at the edge and uploads to cloudfront would not use s3 transfer acceleration as per this option. Faster upload = S3 transfer acceleration which is not mentioned here.
upvoted 1 times
...
AzureDP900
5 months, 2 weeks ago
C is right S3 Transfer Acceleration: This feature can significantly improve the performance of large file uploads by leveraging AWS' global network and caching capabilities. Presigned URL with S3 Transfer Acceleration: By including the S3 Transfer Acceleration endpoint in the presigned URL, you can take advantage of the acceleration to reduce upload times. S3 multipart upload API: Using the S3 multipart upload API allows for resumable uploads, which is essential for large files that may be interrupted during transfer.
upvoted 1 times
...
kgpoj
8 months, 3 weeks ago
Selected Answer: C
C "Most users are reporting slow upload times for objects larger than 100 MB." Straight to S3 Transfer Acceleration.
upvoted 2 times
...
nharaz
1 year, 3 months ago
Selected Answer: D
Presigned URLs still ensure that only authenticated users can upload content, as the generation of a presigned URL requires valid AWS credentials. The URL is temporary and grants the bearer permission to perform the action defined in the URL, in this case, a PUT operation to upload an object
upvoted 1 times
nharaz
1 year, 3 months ago
Sorry I mean = C
upvoted 1 times
...
...
career360guru
1 year, 3 months ago
Selected Answer: C
Option C
upvoted 1 times
...
MegalodonBolado
1 year, 4 months ago
Selected Answer: C
https://aws.amazon.com/blogs/compute/uploading-large-objects-to-amazon-s3-using-multipart-upload-and-transfer-acceleration/ (C)
upvoted 5 times
...
carpa_jo
1 year, 4 months ago
C has the most votes currently. How does C ensure that only authenticated users are allowed to post content?
upvoted 1 times
MegalodonBolado
1 year, 4 months ago
S3TA supports presigned URL. The only problem the architect mest solve is the slow upload. Multipart upload can overcome TCP speed limitations and S3TA reduces latency. See the link in my vote
upvoted 2 times
...
...
yuliaqwerty
1 year, 4 months ago
C is the easiest
upvoted 1 times
...
ayadmawla
1 year, 4 months ago
Selected Answer: A
Answer is A to secure the API. https://aws.amazon.com/blogs/compute/uploading-to-amazon-s3-directly-from-a-web-or-mobile-application/#:~:text=Adding%20authentication%20to%20the%20upload%20process&text=You%20can%20restrict%20access%20to,as%20Amazon%20Cognito%20or%20Auth0.
upvoted 4 times
...
shaaam80
1 year, 4 months ago
Selected Answer: C
Answer C
upvoted 1 times
...
cypkir
1 year, 5 months ago
Selected Answer: C
Answer: C
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago