Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 907 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03

Question #: 907
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A company wants to use an AWS CloudFormation stack for its application in a test environment. The company stores the CloudFormation template in an Amazon S3 bucket that blocks public access. The company wants to grant CloudFormation access to the template in the S3 bucket based on specific user requests to create the test environment. The solution must follow security best practices.

Which solution will meet these requirements?

A. Create a gateway VPC endpoint for Amazon S3. Configure the CloudFormation stack to use the S3 object URL.
B. Create an Amazon API Gateway REST API that has the S3 bucket as the target. Configure the CloudFormation stack to use the API Gateway URL.
C. Create a presigned URL for the template object. Configure the CloudFormation stack to use the presigned URL.
D. Allow public access to the template object in the S3 bucket. Block the public access after the test environment is created.

Show Suggested Answer

Suggested Answer: C 🗳️

by flaviobrf at Aug. 4, 2024, 11:28 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

robotgeek

3 weeks, 2 days ago

Selected Answer: A

The question states "specific user requests" meaning a shared URL does not meet the requirement. BUT with gateway VPC endpoint you can specify custom policies as in the following link https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-access.html

upvoted 1 times

...

pujithacg8

4 months, 4 weeks ago

C, A presigned URL grants temporary access to an S3 object without making it publicly accessible.

upvoted 1 times

...

AnasAWS

5 months ago

Selected Answer: C

https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html

upvoted 4 times

blehbleh

3 months, 3 weeks ago

Thank you for posting this.

upvoted 2 times

...

flaviobrf