Q69 — AWS SAA-C03 Ch.13

Question 69 of 100 | ← Chapter 13

Q969. A company collects 10 GB of telemetry data every day from multiple devices. The company stores the data in an Amazon S3 bucket that is in a source data account.The company has hired several consulting agencies to analyze the company's data. Each agency has a unique AWS account.Each agency requires read access to the company's data.The company needs a secure solution to share the data from the source data account to the consulting agenciesWhich solution will meet these requirements with the LEAST operational effort?

• A. Set up an Amazon CloudFront distribution. Use the S3 bucket as the origin.
• B. Make the S3 bucket public for a limited time. Inform only the agencies that the bucket is publicly accessible.
• C. Configure cross-account access for the S3 bucket to the accounts that the agencies own. ✓
• D. Set up an IAM user for each agency in the source data account. Grant each agency IAM user access to the company's S3 bucket.

Correct Answer: C. Configure cross-account access for the S3 bucket to the accounts that the agencies own.

Explanation

The correct answer is C. Configure cross-account access for the S3 bucket to the accounts that the agencies own.Here's why:A. Set up an Amazon CloudFront distribution. Use the S3 bucket as the origin.- This solution would add an extra layer of complexity (CloudFront) when a simpler solution is available.- It may not be the least operational effort, as you would need to manage the CloudFront distribution.B. Make the S3 bucket public for a limited time. Inform only the agencies that the bucket is publicly accessible.- This is not a secure solution, as it exposes the data publicly, even if only for a limited time.- It does not provide the granular access control that the company requires for the consulting agencies.C. Configure cross-account access for the S3 bucket to the accounts that the agencies own.- This is the best solution as it allows the company to grant specific read access to the consulting agencies' AWS accounts, without having to manage individual IAM users in the source data account.- Cross-account access is a secure and manageable way to share the data with the consulting agencies.D. Set up an IAM user for each agency in the source data account. Grant each agency IAM user access to the company's S3 bucket.- This solution would require more operational effort, as the company would need to manage multiple IAM users in the source data account.- It may also be less secure, as the company would need to share credentials (access keys) with the consulting agencies.In summary, the solution in option C, which involves configuring cross-account access for the S3 bucket, is the most secure and least operationally complex way to share the data with the consulting agencies while maintaining control over the access.