(G4) A company wants to enforce that all objects uploaded to an S3 bucket are encrypted using SSE-KMS. How can this be enforced automatically?

Use a bucket policy that denies uploads not using SSE-KMS.

Enable default encryption with SSE-S3

Use a lifecycle rule to delete unencrypted objects

Use S3 replication to copy only encrypted objects

(G4) A customer wants to host a static website using Amazon S3. The website should return a custom 404 error page when a page is not found. What should the architect do?

Enable static website hosting and specify the 404 page in the configuration

Use CloudFront with Lambda@Edge to return the custom 404

Host the site on EC2 and return the 404 page manually

Enable versioning and set a default version for the 404

(G7) Sarah's photo-sharing startup "SnapCloud" stores user photos in S3 and uses Lambda functions to process images. They've enabled server access logging, but after just two weeks, their 5MB bucket has grown to 50MB. Users are complaining about slow image processing performance. Question: What is the MOST likely cause of the unexpected storage growth?

The bucket is storing its own access log files.

Cross-Region Replication is automatically enabled

Bucket encryption is consuming additional space

Image thumbnails are being automatically generated

(G7) "GameForge Studios" stores game assets in S3 in the ap-southeast-3 region and processes 11,000 GET requests per second during peak gaming hours. After enabling KMS encryption for compliance, players are experiencing significant lag and timeouts when downloading game content. Question: What is the MOST likely cause of the performance degradation?

KMS throttling due to API request limits.

S3 cannot handle that many requests per second

(G7) WeatherTech Inc. collects weather data from 500 weather stations across six continents. Each station generates 500GB of data daily and has high-speed internet. They need to aggregate all data into a single S3 bucket in us-east-1 for their ML models, minimizing operational complexity. Question: What is the MOST operationally efficient solution to aggregate the data quickly?

Enable S3 Transfer Acceleration on the destination bucket.

Use S3 Cross-Region Replication from regional buckets

Configure AWS DataSync to transfer data from each location

Set up AWS Direct Connect to each weather station

(G7) SecureBank needs to replicate critical financial transaction logs from their primary S3 bucket in us-east-1 to a backup bucket in eu-west-1 for disaster recovery. The logs contain sensitive PII that must be encrypted with customer-managed KMS keys, and replication must complete within 15 minutes for regulatory compliance. Question: What configuration is required to meet these requirements?

Configure Cross-Region Replication with KMS encryption and S3 RTC.

Enable Cross-Region Replication with S3-managed encryption

Use AWS Backup for cross-region S3 backup

Set up AWS DataSync with encryption

(G7) TechCorp has 50 AWS accounts under AWS Organizations. Their central IT team maintains project reports in an S3 bucket in the management account. They need to ensure that only users from accounts within their organization can access these reports, while external accounts are completely blocked. Question: What is the LEAST operationally complex solution?

Add a bucket policy with an aws:PrincipalOrgID condition.

Configure IAM policies for each account

Enable AWS SSO with S3 permissions

Use S3 Access Points for each account

(G7) DevSecure Corp runs a CI/CD pipeline where CodeBuild projects need to deploy artifacts to multiple S3 buckets across different environments (dev, staging, prod). Security requires that each environment's CodeBuild can only access its designated S3 bucket, and all data must be encrypted at rest with environment-specific KMS keys. Question: What is the MOST secure approach to implement this requirement?

Create environment-specific IAM roles for CodeBuild with least privilege S3 and KMS.permissions

Use a single IAM role with broad S3 permissions

Store S3 credentials in AWS Systems Manager Parameter Store

Use S3 bucket policies to control access

(G7) WebScale Inc. hosts a global static website using S3 and CloudFront. During their latest product launch, they experienced intermittent 503 errors and slow load times in certain regions. Their DevOps team needs to implement a solution that ensures high availability and optimal performance worldwide with automated failover capabilities. Question: What architecture provides the highest availability and best performance for their global static website?

Multi-region S3 buckets with CloudFront origin groups and health checks.

Single S3 bucket with CloudFront distribution

S3 with Route 53 failover routing

S3 with Application Load Balancer

(G8) Una empresa genera 5 TB/día de logs en S3. Consulta los últimos 15 días a menudo, el resto de forma esporádica, pero debe conservar 7 años. Quiere reducir coste sin perder tiempos de recuperación razonables para auditorías trimestrales. ¿Qué combinación de clases y políticas de ciclo de vida recomiendas?

0–15 días en S3 Standard, 16–90 días a S3 Standard-IA, >90 días a S3 Glacier Deep Archive

0–30 días en S3 Intelligent-Tiering, 31–365 días a S3 Glacier Flexible Retrieval, >365 días a S3 Glacier Deep Archive.

0–15 días en S3 Standard, 16–180 días a S3 One Zone-IA, >180 días a S3 Glacier Instant Retrieval

(G8) Un data lake en S3 debe ser accesible solo desde subredes privadas en una VPC. El equipo activó S3 Block Public Access en cuenta y bucket. ¿Cómo habilitas acceso seguro a los analistas sin exponer el bucket a Internet?

Crear un endpoint S3 Gateway en la VPC y una bucket policy que permita acceso solo si aws:SourceVpce coincide.

Generar URLs firmadas y compartirlas

Abrir el bucket a 0.0.0.0/0 y confiar en IAM

(G8) Un único bucket aloja varios dominios de datos. Equipo A y B deben acceder a prefijos distintos. No quieres gestionar políticas complejas por bucket ni preasignar roles por ARN de usuario externo. ¿Qué opción simplifica y aísla acceso por aplicación?

S3 Access Points con políticas por punto y restricción de prefijo.

Política de bucket con NotResource

Usar solo políticas IAM con condiciones por s3:prefix

(G8) Usuarios globales suben archivos de 5 GB al bucket en us-east-1 y reportan latencia alta desde APAC. ¿Qué mejoras aplicarías con mínimo cambio en clientes?

Activar S3 Transfer Acceleration y mantener PUT de clientes.

Crear buckets por región y replicación bidireccional

Forzar multipart upload a 5 MB por parte

(G8) Debes impedir borrados o sobrescrituras de registros durante 7 años por normativa, incluso por administradores. ¿Qué configuración usa S3?

S3 Object Lock en modo Compliance con períodos de retención y legal hold cuando aplique.

S3 Object Lock en modo Governance y confiar en permisos

(G8) Un flujo manda notificaciones a SQS cada vez que llega un objeto .csv para disparar ETL. A veces el consumidor no recibe algunos mensajes por picos. Quieres durabilidad y reintentos sin perder eventos.

Notificar a SQS estándar con una DLQ y habilitar reintentos del consumidor; usar S3 event filtering por sufijo .csv.

Notificar a Lambda directamente

Notificar a SNS y que SNS reenvíe a SQS

(G8) Un bucket con millones de objetos usa SSE-KMS. La factura de KMS sube por llamadas de descifrado en cargas analíticas masivas. Quieres mantener KMS pero reducir coste sin cambiar ACLs.

Activar S3 Bucket Keys en el bucket con SSE-KMS.

Habilitar replicación y cifrar en destino con SSE-S3

(G8) Seguridad necesita un inventario diario de todos los objetos, su clase de almacenamiento, cifrado y estado de replicación para control y remediación. Debe exportarse en formato consultable.

S3 Inventory diario a CSV o Parquet en otro bucket; analizar con Athena.

aws s3 ls diario con cron en una instancia

(G8) Un equipo de ciencia de datos carga datasets que a veces consulta de forma intensa y otras veces no los toca durante meses. No quieren gestionar reglas manuales.

S3 Intelligent-Tiering con monitoreo de tamaño y exclusión de objetos pequeños cuando no convenga.

Glacier Instant Retrieval para todo

(G5) A company needs to store encrypted backups of critical databases in Amazon S3. Compliance regulations require that encryption keys be managed within AWS, but each department must have a unique key. Additionally, audit logs of all key usage must be maintained. Which solution meets these requirements?

Use SSE-KMS with customer-managed CMKs for each department and enable CloudTrail logging.

Enable default encryption with SSE-S3 on all departmental buckets

Use client-side encryption with department-specific keys stored in Secrets Manager

Use SSE-C with keys generated on premises and manually rotated quarterly

(G5) A startup uses Amazon S3 for hosting static assets of a global web application. They notice slow performance for users in Asia and South America. The company wants to improve download speed and reduce costs without creating regional S3 buckets. What is the BEST solution?

Configure CloudFront with the S3 bucket as the origin.

Use S3 Transfer Acceleration for faster downloads

Replicate S3 data to Asia and South America using CRR

Enable S3 Multi-Region Access Points

(G5) A DevOps engineer must design a CI/CD pipeline that stores build artifacts in Amazon S3. Requirements include automatic cleanup of artifacts older than 30 days and encryption at rest. What is the MOST efficient configuration?

Store artifacts in S3 and enable lifecycle expiration after 30 days.

Use EBS volumes for artifacts and manually clean up

Store artifacts in S3 and configure a Lambda function to delete them daily

Use S3 with versioning and replicate artifacts to Glacier Deep Archive

(G5) A company wants to migrate 400 TB of archived data to S3 Glacier Deep Archive. The migration must complete within 2 weeks without saturating its 200 Mbps internet connection. Which option meets the timeline most cost-effectively?

Use AWS Snowball Edge devices to import data to S3, then apply lifecycle policies to Glacier Deep Archive.

Use AWS DataSync to upload data directly over the internet

Set up AWS Direct Connect and copy data to S3 Glacier

Compress the data locally and upload manually via multipart uploads

(G5) A developer needs to process images uploaded to S3 by running a Lambda function that resizes and stores them in another S3 bucket. The function must only trigger when objects are uploaded under the /raw/ prefix. How should this be configured?

Create an S3 Event Notification for all object creation events and filter by prefix /raw/.

Enable event notifications on the entire bucket

Create an SQS queue subscribed to the S3 event for all uploads

Use AWS Batch to poll S3 for new objects

(G5) A Solutions Architect must ensure that all objects uploaded by users are tagged with the department name for cost allocation. Uploads without this tag must be rejected. What is the MOST efficient solution?

Enforce a bucket policy that requires the tag condition in the PutObject request.

Use AWS Lambda to check tags after upload

Use S3 Access Points to restrict untagged uploads

Apply tags automatically with S3 Batch Operations

(G5) A DevOps engineer notices that S3 request costs have spiked after enabling real-time monitoring for application logs stored in S3. The logs are read frequently but rarely modified. How can costs be reduced without affecting performance?

Move logs to S3 Intelligent-Tiering.

Store logs in EBS for faster access

(G5) A Developer Associate wants to use S3 to host multiple environments (dev, test, prod) of static web assets. Each environment should have isolated access policies and version control. Which architecture is MOST appropriate?

Use separate S3 buckets for each environment with versioning enabled.

Use a single bucket with folders for each environment

Use one bucket and rely on IAM conditions to separate access

Use S3 Access Points for each environment within one bucket

(G9) A development team is building an application that automatically creates thumbnail images for user-uploaded photos. The photos are uploaded directly to an S3 bucket named source-images-bucket. The solution must be serverless and process images as soon as they are uploaded. Which combination of steps is MOST efficient?

Configure an S3 Event Notification on source-images-bucket for PutObject events to trigger an AWS Lambda function.

Configure an S3 Event Notification on source-images-bucket for PutObject events to trigger an AWS Step Functions state machine

Create a CloudWatch Events rule on a schedule to trigger a Lambda function that lists the bucket's contents

Configure S3 Object Lambda with a Lambda function to modify the image as it is being downloaded

(G9) A company needs to allow its users to upload sensitive reports directly to a private S3 bucket via a web application, without granting them any IAM credentials. The application's backend runs on Amazon EC2. Which method should a developer implement to achieve this securely?

Generate an S3 pre-signed URL using the EC2 instance's IAM role in the backend and provide this URL to the client-side application.

Create an IAM user with s3:PutObject permission and embed the credentials in the web application's client-side code

Configure the S3 bucket policy to allow public write access from the company's IP address range

Use AWS Cognito Identity Pools to create temporary IAM credentials for unauthenticated users

(G9) A Lambda function processes files in an S3 bucket in us-east-1. For compliance reasons, all data must also be stored in eu-west-1. The files in the destination bucket must be identical to the source and the solution must be managed by AWS. How can this be achieved?

Enable S3 Cross-Region Replication (CRR) with the existing bucket as the source and a new bucket in eu-west-1 as the destination.

Create a second Lambda function in eu-west-1 that is triggered by a daily CloudWatch Event to copy all new objects

Use AWS DataSync to create a replication task that runs every hour to sync the two buckets

Configure S3 Versioning on both buckets and use S3 Batch Operations to copy the objects

(G9) A DevOps team manages a static website hosted on Amazon S3 and distributed via CloudFront. They need to implement a blue/green deployment strategy to minimize downtime and allow for instant rollbacks. What is the MOST efficient method?

Use two S3 buckets and update the CloudFront distribution's origin to point to the new bucket after deployment is complete.

Use two S3 buckets (blue-bucket and green-bucket) and use an Application Load Balancer to switch traffic between them

Use a single S3 bucket with versioning and use S3 Batch Operations to toggle between object versions

Use AWS CodeDeploy to manage the deployment of the static content to a single S3 bucket

(G9) Your security team needs to investigate who deleted a critical configuration file from a highly sensitive S3 bucket. The DevOps team must provide a definitive audit trail. Which action is REQUIRED to enable this investigation?

Ensure AWS CloudTrail data events are logged for the S3 bucket.

Ensure AWS Config is enabled and recording S3 resources

Ensure S3 Server Access Logging is enabled for the bucket

Ensure S3 Object Lock is enabled on the bucket

(G9) A company has thousands of S3 buckets. The DevOps team needs to create a fully automated report delivered weekly that lists all S3 objects across all buckets that have not been accessed in over 90 days and are still stored in the S3 Standard storage class. What is the LEAST operationally complex solution?

Configure S3 Analytics Storage Class Analysis for all buckets and export the results to an S3 bucket for reporting

Write a Python script using Boto3 to list all buckets, then list all objects in each bucket and use the HEAD object operation to check the LastModified date

Enable S3 Inventory for all buckets to generate a comma-separated values (CSV) manifest of objects and their metadata, then query this data with Amazon Athena.

Use AWS Trusted Advisor to generate a cost optimization report and filter for S3 recommendations

(G9) A data engineering team reports that their Amazon Athena queries against a large dataset in S3 (organized in Hive-style partitioning, e.g., year=2024/month=03/day=01/) are slower than expected. The objects are large ~5 GB Parquet files. As a DevOps Engineer, what is the FIRST and MOST impactful change you would recommend to improve query performance?

Split the large ~5 GB Parquet files into smaller files, ideally between 128 MB and 1 GB.

Enable S3 Transfer Acceleration on the bucket to speed up data access

Implement S3 Intelligent-Tiering to move less accessed data to a cheaper storage class

Convert the data from Parquet format to CSV format

(G3) A company wants to automatically move infrequently accessed objects to a lower-cost storage class but retain them for at least 90 days before deletion. Which configuration meets this requirement?

A. Use S3 Intelligent-Tiering with a 90-day transition rule

B. Create a lifecycle policy to transition to S3 Glacier after 30 days and expire after 90 days.

C. Use S3 Standard-IA and configure a lifecycle rule to delete objects after 90 days

D. Store data directly in S3 One Zone-IA and enable versioning

(G3) A Solutions Architect enables Cross-Region Replication between two S3 buckets. Later, they notice that some objects are not replicated. What is the most probable reason?

C. The objects were uploaded before CRR was enabled.

A. The destination bucket has encryption disabled

B. The IAM role used by CRR doesn’t have the s3:PutReplicationConfiguration permission

D. S3 versioning is enabled only on the source bucket

(G3) A company wants to log all access requests to their S3 bucket for auditing purposes. Which setup is valid?

C. Enable S3 Server Access Logging and store logs in a separate bucket.

A. Enable CloudTrail for S3 Data Events only

B. Enable S3 Access Logs on the same bucket

D. Use CloudWatch Logs to capture S3 events directly

(G3) A company must ensure all S3 objects are encrypted at rest using AWS-managed keys (SSE-S3). Which is the simplest approach?

B. Configure the bucket default encryption to use SSE-S3.

C. Use a bucket policy to deny unencrypted uploads only

D. Manually specify x-amz-server-side-encryption in every PUT request

(G3) After uploading a new object and immediately listing the bucket contents, a developer doesn’t see the file listed. Why might this happen?

D. The list operation can be eventually consistent while PUT is strongly consistent.

A. S3 provides eventual consistency for all operations

B. The bucket has versioning disabled

C. The upload used multipart upload

(G3) An analytics job reads millions of small files from S3 and performs poorly. What is the most effective optimization?

C. Combine small files into larger objects (object consolidation).

A. Use S3 Transfer Acceleration

D. Store data in S3 Glacier Deep Archive

(G6) A developer is building an application that stores uploaded user images in an Amazon S3 bucket. The application must ensure that: · Each upload triggers a thumbnail generation Lambda function. · Duplicate uploads are not overwritten. · Users can retrieve their files directly through a pre-signed URL. Which of the following configurations meets these requirements with minimal effort?

Enable S3 Versioning, configure an S3 event notification for ObjectCreated:* event to trigger the Lambda function, and use pre-signed URLs for upload and retrieval.

Enable S3 Versioning and S3 Transfer Acceleration; use API Gateway to trigger the Lambda function

Enable S3 Object Lock in Governance mode and use API Gateway for uploads

Use S3 Access Points with Transfer Acceleration enabled and trigger Lambda with EventBridge

(G6) A company stores all its application logs in an S3 bucket. The logs are accessed frequently for the first 30 days, but after that, they are rarely used. The company must minimize storage costs while maintaining instant access when needed. Which S3 storage class configuration should the architect recommend?

S3 Standard-Infrequent Access (S3 Standard-IA) with a Lifecycle policy

(G6) A company needs to store access logs generated by several applications in an Amazon S3 bucket. The logs must be retained for 90 days and automatically deleted afterward. Which configuration meets these requirements most efficiently?

Use an S3 Lifecycle Policy to automatically delete objects after 90 days.

Configure a bucket policy to deny access to objects after 90 days

Implement a Lambda function to delete old objects weekly

Manually move the logs to S3 Glacier and delete them later

(G6) A company wants to host a static website using Amazon S3. The site must be accessible only through Amazon CloudFront, not directly via the S3 bucket URL. Which configuration should be implemented to meet this requirement?

Create an Origin Access Control (OAC) or Origin Access Identity (OAI) and block public access to the bucket.

Make the bucket public and link it to the CloudFront domain

Configure CORS on the bucket to only allow requests from CloudFront

Use presigned URLs to serve each file of the site

AOS_ACT2_INDIVIDUAL_2025

Quiz

•

others

•

Practice Problem

•

Easy

Marcela Castro León

Used 1+ times

FREE Resource

71 questions

Show all answers

MULTIPLE CHOICE QUESTION

5 mins • 1 pt

(G4) A developer is building a web application that serves static content (HTML, CSS, JS) directly from an Amazon S3 bucket. The developer wants to ensure users around the world experience low latency and wants to prevent direct access to the S3 bucket URL. What should the developer do to meet these requirements?

Enable static website hosting on S3 and share the bucket URL directly

Create a CloudFront distribution with the S3 bucket as the origin and restrict bucket access to only the CloudFront origin identity.

Set the S3 bucket policy to public-read so everyone can access the content

Use AWS Global Accelerator to access the S3 bucket content globally

MULTIPLE CHOICE QUESTION

5 mins • 1 pt

(G4) A solutions architect is designing a backup solution. The company requires that objects stored in Amazon S3 are archived automatically after 30 days and deleted 1 year after creation to reduce storage costs. What is the MOST cost-effective way to meet these requirements?

Use S3 Intelligent-Tiering with automatic archival

Configure an S3 Lifecycle policy to transition objects to Glacier Deep Archive after 30 days and delete after 365 days.

Use S3 Versioning and manually delete old versions with a script

Set up an S3 EventBridge rule to trigger a Lambda function that moves and deletes objects

MULTIPLE CHOICE QUESTION

5 mins • 1 pt

(G4) A DevOps team is building a CI/CD pipeline using AWS CodePipeline. Build artifacts must be stored in Amazon S3 with strong data integrity and version control. The team also wants to ensure that older versions are retained and protected against accidental deletions. What should the team do to meet these requirements?

Store artifacts in an S3 bucket with versioning and MFA Delete enabled

Use an S3 Standard bucket with server-side encryption only

Configure the bucket for public access with object locks

Store artifacts in CodeBuild logs and export them as needed

MULTIPLE CHOICE QUESTION

5 mins • 1 pt

(G4) A developer is uploading large media files (>5 GB) to Amazon S3 through a web application. Users frequently experience failed uploads due to network interruptions. How can the developer ensure reliable and resumable uploads?

Use the AWS CLI to upload files in parts

Use S3 Transfer Acceleration

Implement S3 Multipart Upload using the AWS SDK.

Split the file manually and upload each chunk separately

MULTIPLE CHOICE QUESTION

5 mins • 1 pt

(G4) A company stores log data in Amazon S3. Analysts run Amazon Athena queries on the data, but query costs are increasing. How can a Solutions Architect reduce the cost of queries without impacting data availability?

Enable S3 Object Lock on the log files

Compress the logs and convert them to columnar format (e.g., Parquet).

Use S3 Intelligent-Tiering to reduce storage cost

Archive the logs in Glacier Deep Archive

MULTIPLE CHOICE QUESTION

5 mins • 1 pt

(G4) A DevOps engineer needs to automate deployments of static assets to Amazon S3. They must ensure only updated files are uploaded to reduce deployment time. What is the MOST efficient solution?

Use aws s3 sync in a deployment script

Upload files manually via the console

Re-upload all files during every deployment

Use CodeDeploy with manual scripts for each file

MULTIPLE CHOICE QUESTION

5 mins • 1 pt

(G4) A developer wants to give temporary access to a private S3 object for authenticated users of a web application. What is the best way to achieve this?

Make the object public

Use signed URLs generated by the backend using AWS SDK.

Share the object key and ask users to use the AWS CLI

Enable bucket logging for the object

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

66 questions

Prepositions Revision for 1st term EXAM

Quiz

•

KG - University

68 questions

Seventh Grade Vocabulary Quiz Weeks 3-4

Quiz

•

7th Grade

70 questions

2nd Semester CCR Final ACP

Quiz

•

KG - University

70 questions

RHS Spanish 2 Final Exam

Quiz

•

12th Grade

70 questions

Risk Management In Retail Banking Practice

Quiz

•

KG - University

72 questions

Grade 6: SCIENCE FINAL EXAM

Quiz

•

8th Grade

70 questions

S10-B1-2-3-4-5-6-7

Quiz

•

Professional Development

68 questions

Executive Branch Practice Test

Quiz

•

KG - University

Popular Resources on Wayground

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

54 questions

Analyzing Line Graphs & Tables

Quiz

•

4th Grade

$fractions$

22 questions

fractions

Quiz

•

3rd Grade

20 questions

Main Idea and Details

Quiz

•

5th Grade

20 questions

Context Clues

Quiz

•

6th Grade

15 questions

Equivalent Fractions

Quiz

•

4th Grade

Discover more resources for others

20 questions

Place Value

Quiz

•

KG - 3rd Grade

6 questions

3.3 Magnets

Quiz

•

20 questions

Ch. 7 Quadrilateral Quiz Review

Quiz

•

KG - University

12 questions

HOMOPHONES

Lesson

•

KG - 4th Grade

10 questions

Long i- igh, ie, and y Quiz

Quiz

•

KG - 3rd Grade

12 questions

Quarter Past, Half Past, and Quarter To

Quiz

•

KG - 12th Grade

20 questions

Capitalization in sentences

Quiz

•

KG - 4th Grade

14 questions

Reference Sources

Lesson

•

KG - 3rd Grade

AOS_ACT2_INDIVIDUAL_2025

71 questions

(G4) A solutions architect is designing a backup solution. The company requires that objects stored in Amazon S3 are archived automatically after 30 days and deleted 1 year after creation to reduce storage costs. What is the MOST cost-effective way to meet these requirements?

(G4) A developer is uploading large media files (>5 GB) to Amazon S3 through a web application. Users frequently experience failed uploads due to network interruptions. How can the developer ensure reliable and resumable uploads?

(G4) A company stores log data in Amazon S3. Analysts run Amazon Athena queries on the data, but query costs are increasing. How can a Solutions Architect reduce the cost of queries without impacting data availability?

(G4) A DevOps engineer needs to automate deployments of static assets to Amazon S3. They must ensure only updated files are uploaded to reduce deployment time. What is the MOST efficient solution?

(G4) A developer wants to give temporary access to a private S3 object for authenticated users of a web application. What is the best way to achieve this?

(G4) A company must ensure that deleted objects in an S3 bucket can be recovered. What should a Solutions Architect do to meet this requirement?

(G4) A company wants to enforce that all objects uploaded to an S3 bucket are encrypted using SSE-KMS. How can this be enforced automatically?

(G4) A customer wants to host a static website using Amazon S3. The website should return a custom 404 error page when a page is not found. What should the architect do?

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for others