Q3 — AWS SAA-C03 Ch.9

Question 3 of 40 | ← Chapter 9

Q563. A law firm needs to share information with the public. The information includes hundreds of files that must be publicly readable. Modifications or deletions of the files by anyone before a designated future date are prohibited.Which solution will meet these requirements in the MOST secure way?

Correct Answer: B. Create a new Amazon S3 bucket with S3 Versioning enabled. Use S3 Object Lock with a retention period in accordance with the designated date. Configure the S3 bucket for static website hosting. Set an S3 bucket policy to allow read-only access to the objects.

Explanation

To meet the requirements of sharing information with the public, including prohibiting modifications or deletions of files before a designated future date in the most secure way, the recommended solution is as follows: B. Create a new Amazon S3 bucket with S3 Versioning enabled. Use S3 Object Lock with a retention period in accordance with the designated date. Configure the S3 bucket for static website hosting. Set an S3 bucket policy to allow read-only access to the objects.\1. Amazon S3 bucket with S3 Versioning: By enabling S3 Versioning, every modification or deletion of an object in the bucket will create a new version of the object, allowing you to retain the original version. This provides a level of protection against accidental or malicious modifications or deletions. \2. S3 Object Lock: Using S3 Object Lock, you can enforce a retention period for objects in the bucket, preventing any modifications or deletions of the objects until the designated future date. This ensures the integrity and immutability of the files during the specified period. \3. Static website hosting: Configuring the S3 bucket for static website hosting allows you to easily share the files with the public. The bucket can be accessed via a public URL, making the files publicly readable. \4. S3 bucket policy: By setting an S3 bucket policy, you can control access to the objects in the bucket. Granting read-only access to the objects ensures that the public can view the files without the ability to modify or delete them. Option A suggests uploading files to an Amazon S3 bucket configured for static website hosting and granting read-only IAM permissions. While this provides public access to the files, it does not address the requirement of prohibiting modifications or deletions before a designated future date. Option C suggests using S3 Versioning, an event trigger, and an AWS Lambda function to replace modified or deleted objects with the original versions. While this approach provides a way to restore modified or deleted files, it does not prevent the modifications or deletions from occurring in the first place. Option D suggests using S3 Object Lock with a retention period and granting read-only IAM permissions. However, it does not mention enabling S3 Versioning, which is necessary to retain the original versions of the files. In summary, the most secure way to meet the requirements of sharing information with the public, prohibiting modifications or deletions of files before a designated future date, is to create a new Amazon S3 bucket with S3 Versioning enabled, use S3 Object Lock with a retention period, configure the bucket for static website hosting, and set an S3 bucket policy to allow read-only access to the objects (option B). This ensures the integrity and immutability of the files while providing public access to them.