Exams / SAA-C03 / S3 access control

S3 access control: SAA-C03 practice questions

2 free questions on S3 access control, from the Design Secure Architectures domain (30% of the SAA-C03 exam guide). Every question is original and explains why each option is right or wrong.

Questions

1. A media company stores downloadable reports in an Amazon S3 bucket and serves them to customers through an Amazon CloudFront distribution. Every object is encrypted with SSE-KMS…Harder
2. A marketing company has one AWS account with about 300 Amazon S3 buckets, and teams create new buckets every week. Team leads have full permissions on their own buckets…Medium

Study S3 access control

• Blocking public access to your Amazon S3 storage

More Design Secure Architectures topics

• IAM roles and policies (3)
• S3 encryption (1)
• Security groups and network ACLs (3)
• Secrets management (2)
• Multi-account governance and auditing (2)
• Edge protection with AWS WAF and Shield (1)
• Threat detection and data discovery (2)
• Application user sign-in (1)
• Encryption at rest and in transit (2)