AOS_ACT2_INDIVIDUAL_2025

(G4) A developer is building a web application that serves static content (HTML, CSS, JS) directly from an Amazon S3 bucket. The developer wants to ensure users around the world experience low latency and wants to prevent direct access to the S3 bucket URL. What should the developer do to meet these requirements?

• Enable static website hosting on S3 and share the bucket URL directly
• Create a CloudFront distribution with the S3 bucket as the origin and restrict bucket access to only the CloudFront origin identity.
• Set the S3 bucket policy to public-read so everyone can access the content
• Use AWS Global Accelerator to access the S3 bucket content globally

(G4) A solutions architect is designing a backup solution. The company requires that objects stored in Amazon S3 are archived automatically after 30 days and deleted 1 year after creation to reduce storage costs. What is the MOST cost-effective way to meet these requirements?

• Use S3 Intelligent-Tiering with automatic archival
• Configure an S3 Lifecycle policy to transition objects to Glacier Deep Archive after 30 days and delete after 365 days.
• Use S3 Versioning and manually delete old versions with a script
• Set up an S3 EventBridge rule to trigger a Lambda function that moves and deletes objects

(G4) A DevOps team is building a CI/CD pipeline using AWS CodePipeline. Build artifacts must be stored in Amazon S3 with strong data integrity and version control. The team also wants to ensure that older versions are retained and protected against accidental deletions. What should the team do to meet these requirements?

• Store artifacts in an S3 bucket with versioning and MFA Delete enabled
• Use an S3 Standard bucket with server-side encryption only
• Configure the bucket for public access with object locks
• Store artifacts in CodeBuild logs and export them as needed

(G4) A developer is uploading large media files (>5 GB) to Amazon S3 through a web application. Users frequently experience failed uploads due to network interruptions. How can the developer ensure reliable and resumable uploads?

• Use the AWS CLI to upload files in parts
• Use S3 Transfer Acceleration
• Implement S3 Multipart Upload using the AWS SDK.
• Split the file manually and upload each chunk separately

(G4) A company stores log data in Amazon S3. Analysts run Amazon Athena queries on the data, but query costs are increasing. How can a Solutions Architect reduce the cost of queries without impacting data availability?

• Enable S3 Object Lock on the log files
• Compress the logs and convert them to columnar format (e.g., Parquet).
• Use S3 Intelligent-Tiering to reduce storage cost
• Archive the logs in Glacier Deep Archive

(G4) A DevOps engineer needs to automate deployments of static assets to Amazon S3. They must ensure only updated files are uploaded to reduce deployment time. What is the MOST efficient solution?

• Use aws s3 sync in a deployment script
• Upload files manually via the console
• Re-upload all files during every deployment
• Use CodeDeploy with manual scripts for each file

(G4) A developer wants to give temporary access to a private S3 object for authenticated users of a web application. What is the best way to achieve this?

• Make the object public
• Use signed URLs generated by the backend using AWS SDK.
• Share the object key and ask users to use the AWS CLI
• Enable bucket logging for the object

(G4) A company must ensure that deleted objects in an S3 bucket can be recovered. What should a Solutions Architect do to meet this requirement?

• Enable server-side encryption
• Enable S3 versioning.
• Enable object replication
• Use S3 Transfer Acceleration

(G4) A company wants to enforce that all objects uploaded to an S3 bucket are encrypted using SSE-KMS. How can this be enforced automatically?

• Enable default encryption with SSE-S3
• Use a bucket policy that denies uploads not using SSE-KMS.
• Use a lifecycle rule to delete unencrypted objects
• Use S3 replication to copy only encrypted objects

(G4) A customer wants to host a static website using Amazon S3. The website should return a custom 404 error page when a page is not found. What should the architect do?

• Enable static website hosting and specify the 404 page in the configuration
• Use CloudFront with Lambda@Edge to return the custom 404
• Host the site on EC2 and return the 404 page manually
• Enable versioning and set a default version for the 404