Correct Answer: Create an AWS IAM policy with Amazon S3 read permissions and attach it to a group
AWS IAM allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management....
Correct Answer
Create an AWS IAM policy with Amazon S3 read permissions and attach it to a group
Why This Answer Is Correct
AWS IAM allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
This question evaluates your knowledge of Amazon S3 — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon S3 is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?
An organization is migrating a 2 PB data archive from an on-premises Hadoop cluster to Amazon S3. They have a 1 Gbps internet connection and a 100 Mbps direct link. Bandwidth is limited and they need the migration to finish within 4 weeks. What is the most feasible way to migrate ?
A fintech startup wants to ensure that no developer can accidentally grant public access to S3 buckets containing sensitive customer data. They want an automated way to detect AND automatically remediate this at the organization level. How should they implement this?
Your application uses Amazon S3 to store millions of small objects. You find that the costs for 'GET' and 'PUT' requests are higher than the storage costs. What is the most effective way to reduce the overall request costs for these small objects?
A large biotech firm needs to move 500 TB of genomic data to S3. They want to ensure they don't exceed their 1 Gbps Direct Connect limit during business hours but want the transfer to be as fast as possible at night. Which tool integrates this scheduling and bandwidth control natively?