A company wishes to host data in S3 storage and wants to be able to control the access to each S3 bucket. What are the 2 ways in which this can be achieved?

A developer has built a S3 bucket called s3:/HyruleStorage and configured server-wide logging with a path of s3:/HyruleStorage/logs. The developer copied 100 KB of image data files to the subdirectory s3:/HyruleStorage/images and then went to bed. When the developer returned a few days later, the bucket had grown to 50 GB in size. What most likely caused the bucket size to grow so large?

A company is planning on storing their files from their on-premises location onto the Simple Storage Service. After a period of 3 months, they want to archive the files, since they would be rarely used. Which of the following would be the right way to service this requirement?

A company has an application that stores images and thumbnails for images on S3. While the thumbnail images need to be available for download immediately, the images and thumbnails themselves are not accessed that frequently.

Which is the most cost-efficient storage option to store images that meet these requirements?

Which of the descriptions below best describes what this bucket policy does?

A Developer decides to store highly secure data in Amazon S3 and wants to implement server-side encryption (SSE) with granular control of who can access the master key. Company policy requires that the master key be created, rotated, and disabled easily when needed, all for security reasons. Which solution should be used to meet these requirements?

You work for a major news network in Europe. They have just released a new app which allows users to report on events as and when they happen using their mobile phone. Users are able to upload pictures from the app and then other users will be able to view these pics. Your organization expects this app to grow very quickly, essentially doubling it's user base every month. The app uses S3 to store the media and you are expecting sudden and large increases in traffic to S3 when a major news event takes place (as people will be uploading content in huge numbers). You need to keep your storage costs to a minimum however and it does not matter if some objects are lost. Which storage media should you use to keep costs as low as possible?

An IAM principle can only access an S3 object if there is no explicit deny and the user IAM permissions allows it or the resource policy allows it.

A deployment package utilizes the AWS CLI to put files into any S3 bucket in the account, using environment variables to store access keys. The package is operating on Amazon EC2 instances that are now changed to run with an assumed IAM role and a policy that restricts access to a single bucket. Following the update, the Developer signs into the host and retains the ability to write to all of the account's S3 buckets. What is the MOST LIKELY REASON for this occurrence?