AWS Certified Developer Associate · Free Practice Question Medium
Question 13
A company has transferred some of its confidential documents to a private Amazon S3 bucket that is not publicly accessible. Now, the company intends to build a serverless application that allows its staff to securely share these files with others.
Which AWS service should the company utilize to ensure secure file sharing and access?
-
A
AWS Identity and Access Management (IAM) roles
-
B
S3 Access Control Lists (ACLs)
-
C
Amazon Cognito identity pool
-
D
S3 presigned URLs
Reveal correct answer
Correct answer: D
Explanation
S3 presigned URLs are the correct answer because they provide secure, temporary access to a specific S3 object without requiring AWS security credentials. This allows users to share the files securely with others.
CORRECT: "S3 presigned URLs" is the correct answer (as explained above.)
INCORRECT: "AWS Identity and Access Management (IAM) roles" is incorrect.
AWS Identity and Access Management (IAM) roles are used for granting applications or AWS services permissions to access AWS resources. They don't directly facilitate the secure sharing of S3 objects with external users.
INCORRECT: "Amazon Cognito identity pool" is incorrect.
Amazon Cognito identity pools are used to provide temporary AWS credentials to users of your application, not for directly enabling secure file sharing.
INCORRECT: "S3 Access Control Lists (ACLs)" is incorrect.
S3 Access Control Lists (ACLs) can be used to manage permissions at the object level, but they do not provide a method to securely share specific S3 objects with others.
References:
https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html
Save time with our AWS cheat sheets:
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
