exam questions

Exam AWS Certified Solutions Architect - Professional All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional exam

Exam AWS Certified Solutions Architect - Professional topic 1 question 460 discussion

A group of research institutions and hospitals are in a partnership to study 2 PBs of genomic data. The institute that owns the data stores it in an Amazon S3 bucket and updates it regularly. The institute would like to give all of the organizations in the partnership read access to the data. All members of the partnership are extremely cost-conscious, and the institute that owns the account with the S3 bucket is concerned about covering the costs for requests and data transfers from Amazon S3.
Which solution allows for secure datasharing without causing the institute that owns the bucket to assume all the costs for S3 requests and data transfers?

  • A. Ensure that all organizations in the partnership have AWS accounts. In the account with the S3 bucket, create a cross-account role for each account in the partnership that allows read access to the data. Have the organizations assume and use that read role when accessing the data.
  • B. Ensure that all organizations in the partnership have AWS accounts. Create a bucket policy on the bucket that owns the data. The policy should allow the accounts in the partnership read access to the bucket. Enable Requester Pays on the bucket. Have the organizations use their AWS credentials when accessing the data.
  • C. Ensure that all organizations in the partnership have AWS accounts. Configure buckets in each of the accounts with a bucket policy that allows the institute that owns the data the ability to write to the bucket. Periodically sync the data from the institute's account to the other organizations. Have the organizations use their AWS credentials when accessing the data using their accounts.
  • D. Ensure that all organizations in the partnership have AWS accounts. In the account with the S3 bucket, create a cross-account role for each account in the partnership that allows read access to the data. Enable Requester Pays on the bucket. Have the organizations assume and use that read role when accessing the data.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
donathon
Highly Voted 3 years, 7 months ago
B In general, bucket owners pay for all Amazon S3 storage and data transfer costs associated with their bucket. A bucket owner, however, can configure a bucket to be a Requester Pays bucket. With Requester Pays buckets, the requester instead of the bucket owner pays the cost of the request and the data download from the bucket. The bucket owner always pays the cost of storing data. If you enable Requester Pays on a bucket, anonymous access to that bucket is not allowed. A\D: When the requester assumes an AWS Identity and Access Management (IAM) role prior to making their request, the account to which the role belongs is charged for the request. C: This would incur additional cost of storing the data.
upvoted 53 times
AJ41185
3 years, 6 months ago
Agree with the explaination
upvoted 2 times
...
...
fw
Highly Voted 3 years, 7 months ago
B. D doesn't work as if another account use cross-account role created under the bucket owner account, the bucket owner account is charged for the request.
upvoted 10 times
...
mnsait
Most Recent 4 months, 2 weeks ago
Selected Answer: B
Agree with everyone on B. Initially I thought it is D (assume IAM role) but later learnt that this will make the S3 bucket owner pay the cost!! Learnt this now.
upvoted 1 times
...
SkyZeroZx
1 year, 10 months ago
Selected Answer: B
B. To enable Requester Pays for an S3 bucket
upvoted 1 times
...
dmscountera
2 years, 6 months ago
Selected Answer: B
Based on all comments
upvoted 1 times
...
bihani
2 years, 7 months ago
Selected Answer: B
Answer is B
upvoted 1 times
...
cldy
3 years, 4 months ago
B. Ensure that all organizations in the partnership have AWS accounts. Create a bucket policy on the bucket that owns the data. The policy should allow the accounts in the partnership read access to the bucket. Enable Requester Pays on the bucket. Have the organizations use their AWS credentials when accessing the data.
upvoted 1 times
...
AzureDP900
3 years, 4 months ago
requester pay the price , my answer is B
upvoted 1 times
...
acloudguru
3 years, 5 months ago
Selected Answer: B
B. To enable Requester Pays for an S3 bucket
upvoted 1 times
...
seyik
3 years, 5 months ago
B. To enable Requester Pays for an S3 bucket Sign in to the AWS Management Console and open the Amazon S3 console at https://console.aws.amazon.com/s3/. In the Buckets list, choose the name of the bucket that you want to enable Requester Pays for. Choose Properties. Under Requester pays, choose Edit. Choose Enable, and choose Save changes. Amazon S3 enables Requester Pays for your bucket and displays your Bucket overview. Under Requester pays, you see Enabled. https://docs.aws.amazon.com/AmazonS3/latest/userguide/RequesterPaysExamples.html
upvoted 1 times
...
andylogan
3 years, 5 months ago
It's B - If requester pays is enabled then the request has to be authenticated and cannot assume a role to access the S3 bucket.
upvoted 1 times
...
WhyIronMan
3 years, 5 months ago
I'll go with B
upvoted 1 times
...
Akhil254
3 years, 5 months ago
B correct
upvoted 1 times
...
Amitv2706
3 years, 5 months ago
Answer is B. D -Cant be answer as the role owning account will have to pay for the requests which will defeat the purpose of transferring data transfer cost to requester account.
upvoted 1 times
...
Waiweng
3 years, 5 months ago
It's B
upvoted 3 times
...
Pupu86
3 years, 5 months ago
Answer is B. Option D defeats the purpose of creating individual AWS accounts if there is no policy to mandates its use.
upvoted 1 times
...
Kian1
3 years, 5 months ago
going with B
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago