ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS DevOps Engineer Professional All Questions

View all questions & answers for the AWS DevOps Engineer Professional exam
Go to Exam

Exam AWS DevOps Engineer Professional topic 1 question 19 discussion

Exam question from Amazon's AWS DevOps Engineer Professional
Question #: 19
Topic #: 1
[All AWS DevOps Engineer Professional Questions]

An Amazon EC2 instance is running in a Virtual Private Cloud (VPC) and needs to download an object from a restricted Amazon S3 bucket. When the DevOps engineer tries to download, the object an AccessDenied error is received.
What are the possible causes for this error? (Choose two.)

  • A. The S3 bucket default encryption is enabled
  • B. There is an error in the S3 bucket policy
  • C. The object has been moved to Amazon Glacier
  • D. There is an error in the IAM role configuration
  • E. S3 versioning is enabled
Show Suggested Answer Hide Answer
Suggested Answer: BD 🗳️
by helloworldabc at Aug. 31, 2022, 9:36 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
devops7
Highly Voted 2 years, 8 months ago
Ans: B, D A. The S3 bucket default encryption is enabled will not trigger access denied B. There is an error in the S3 bucket policy yes C. The object has been moved to Amazon Glacier The error should be "Object is of storage class GLACIER. Unable to perform download operations on GLACIER objects. You must restore the object to be able to perform the operation." D. There is an error in the IAM role configuration yes E. S3 versioning is enabled will not trigger access denied
upvoted 15 times
...
Tika01
Most Recent 2 years, 1 month ago
Selected Answer: BD
B. There is an error in the S3 bucket policy: The S3 bucket policy could have been updated, or there might be an error in the existing policy that is preventing access to the object. D. There is an error in the IAM role configuration: The IAM role attached to the EC2 instance might not have the necessary permissions to access the S3 bucket.
upvoted 1 times
...
Piccaso
2 years, 3 months ago
Selected Answer: CD
A is excluded, AccessDenied is not caused by enabled encryption. B is excluded, S3 bucket policy's error should throw out other errors. E is excluded, I am not sure why
upvoted 1 times
Piccaso
2 years, 3 months ago
I was wrong about C. The explaining from devops7 is the one we need to read.
upvoted 1 times
Piccaso
2 years, 3 months ago
This is a official source about downloading from Glacier https://docs.aws.amazon.com/amazonglacier/latest/dev/downloading-an-archive.html
upvoted 1 times
...
...
...
Bulti
2 years, 4 months ago
B&D is correct
upvoted 1 times
...
colinquek
2 years, 8 months ago
Selected Answer: BD
the other answers still allow downloads to occur.
upvoted 1 times
...
ohcn
2 years, 8 months ago
Selected Answer: BD
B and D
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago