Q8 — AWS SAA-C03 Ch.13

Question 8 of 100 | ← Chapter 13

Q908. A global company runs its workloads on AWS. The company's application uses Amazon S3 buckets across AWS Regions for sensitive data storage and analysis. The company stores millions of objects in multiple S3 buckets daily. The company wants to identify all S3 buckets that are not versioning-enabled.Which solution will meet these requirements?

• A. Set up an AWS CloudTrail event that has a rule to identify all S3 buckets that are not versioning-enabled across Regions.
• B. Use Amazon S3 Storage Lens to identify all S3 buckets that are not versioning-enabled across Regions. ✓
• C. Enable IAM Access Analyzer for S3 to identify all S3 buckets that are not versioning-enabled across Regions.
• D. Create an S3 Multi-Region Access Point to identify all S3 buckets that are not versioning-enabled across Regions.

Correct Answer: B. Use Amazon S3 Storage Lens to identify all S3 buckets that are not versioning-enabled across Regions.

Explanation

To identify all S3 buckets that are not versioning-enabled across AWS Regions, the following solution will meet the requirements:B. Use Amazon S3 Storage Lens to identify all S3 buckets that are not versioning-enabled across Regions.Amazon S3 Storage Lens provides a comprehensive view of your S3 storage usage and activity. It offers insights and recommendations to optimize costs, improve security, and identify potential issues. With S3 Storage Lens, you can analyze your S3 buckets across AWS Regions and easily identify buckets that do not have versioning enabled.Option A suggests setting up an AWS CloudTrail event with a rule to identify non-versioning-enabled S3 buckets. While CloudTrail can capture API events related to S3 bucket operations, it would require additional configuration and scripting to filter and identify non-versioning-enabled buckets.Option C mentions enabling IAM Access Analyzer for S3. IAM Access Analyzer helps identify resources with potentially unintended access permissions, but it is not specifically designed to identify non-versioning-enabled S3 buckets.Option D suggests creating an S3 Multi-Region Access Point. While Multi-Region Access Points provide a simplified way to access data across multiple AWS Regions, they do not have a specific capability to identify non-versioning-enabled buckets.In summary, option B using Amazon S3 Storage Lens is the most appropriate solution to identify all S3 buckets that are not versioning-enabled across AWS Regions. It offers a comprehensive and efficient method to analyze the S3 buckets and provides the necessary insights to identify non-versioning-enabled buckets for the global company's needs.