SAA-C03 Question 385
Select 2A company is storing large datasets in an Amazon S3 bucket configured with the 'Requester Pays' option. They want to ensure that only certain authorized users can access the bucket and that the cost of data transfer is borne by the requester. How should the company configure the S3 bucket to meet their requirements?
- A
Attach a bucket policy that allows access only to specific IAM users or roles.
- B
Enable server-side encryption (SSE) for the bucket to ensure secure data transfer.
- C
Use a bucket policy to explicitly deny access to anonymous users.
- D
Ensure the requester includes the 'x-amz-request-payer: requester' header in their API requests.
- E
Create an Access Control List (ACL) to grant access to specific users.
Show answer and explanation
Correct answers: A, D
Explanation
To properly implement the Requester Pays model, the bucket policy must specify which IAM users or roles are authorized to access the bucket. Additionally, the requester must include the 'x-amz-request-payer: requester' header in their requests to acknowledge responsibility for the data transfer costs. While other options like encryption and ACLs may improve security or control access, they do not directly address the requirements for enforcing the Requester Pays model.
- A. Correct.
Correct: A bucket policy can define IAM users or roles that are allowed to access the bucket, ensuring only authorized users can access the data.
- B. Incorrect.
Incorrect: Enabling server-side encryption (SSE) ensures data is encrypted at rest, but it does not control access or enforce the Requester Pays model.
- C. Incorrect.
Incorrect: Denying access to anonymous users prevents unauthorized access, but it does not implement the Requester Pays feature or ensure costs are borne by the requester.
- D. Correct.
Correct: The 'x-amz-request-payer: requester' header must be included in API requests to indicate that the requester agrees to pay for the data transfer.
- E. Incorrect.
Incorrect: ACLs can be used to control access, but they are less flexible and secure compared to bucket policies. ACLs also do not enforce the Requester Pays model.