SAA-C03 Question 388
Select 2A company has a large dataset stored in an S3 bucket configured with the 'Requester Pays' feature. They want to share this dataset with external researchers who will download the data. Which of the following must the company ensure to allow researchers to access the data?
- A
The researchers must include the 'x-amz-request-payer' header in their requests.
- B
The bucket policy must explicitly allow access to the researchers' IAM roles or users.
- C
The company must enable versioning on the S3 bucket.
- D
The researchers must have an AWS account to access the bucket.
- E
The company must use a signed URL to grant access to the objects in the bucket.
Show answer and explanation
Correct answers: A, B
Explanation
To allow access to an S3 bucket with the 'Requester Pays' feature, requesters must include the 'x-amz-request-payer' header to confirm they accept the charges. Additionally, the bucket policy must explicitly permit access to the researchers' IAM roles, users, or other credentials. Other options, such as enabling versioning or requiring signed URLs, are not directly relevant to this use case.
- A. Correct.
Correct: When 'Requester Pays' is enabled, requesters must include the 'x-amz-request-payer' header in their S3 requests to indicate they agree to pay the charges.
- B. Correct.
Correct: A bucket policy is required to explicitly allow access to the researchers, as permissions are not granted by default.
- C. Incorrect.
Incorrect: Enabling versioning is unrelated to the 'Requester Pays' feature and is not required for access.
- D. Incorrect.
Incorrect: It is not mandatory for the researchers to have an AWS account; they can access the bucket using appropriate credentials or policies.
- E. Incorrect.
Incorrect: While signed URLs can grant temporary access, they are not required specifically for working with 'Requester Pays' buckets.