Topic 1 Question 903
A company manages a data lake in an Amazon S3 bucket that numerous applications access. The S3 bucket contains a unique prefix for each application. The company wants to restrict each application to its specific prefix and to have granular control of the objects under each prefix.
Which solution will meet these requirements with the LEAST operational overhead?
Create dedicated S3 access points and access point policies for each application.
Create an S3 Batch Operations job to set the ACL permissions for each object in the S3 bucket.
Replicate the objects in the S3 bucket to new S3 buckets for each application. Create replication rules by prefix.
Replicate the objects in the S3 bucket to new S3 buckets for each application. Create dedicated S3 access points for each application.
ユーザの投票
コメント(7)
Answer A By creating separate access points for each application, you can enforce access controls specific to their respective prefixes while minimizing administrative complexity. This approach provides a clean separation of permissions and reduces the risk of misconfigurations.
Options B, C, and D are not as efficient or straightforward:
Option B (S3 Batch Operations) involves setting ACL permissions for each object individually, which can be cumbersome and time-consuming. Option C (replicating objects to new S3 buckets) introduces additional buckets and replication rules, increasing management overhead. Option D (replicating objects and creating dedicated S3 access points) adds unnecessary complexity by combining replication and access point creation.
👍 5anirudhsharma2024/06/06- 正解だと思う選択肢: A👍 4Tomrr2024/05/23
- 正解だと思う選択肢: A
Explanation:
S3 Access Points: These provide a way to manage access to shared data sets in Amazon S3. Each access point has a unique hostname and a policy that is specific to the use case, allowing for granular control over access to data. Access Point Policies: These policies can be tailored to restrict access to specific prefixes within an S3 bucket, ensuring that each application only has access to its designated prefix.👍 3emakid2024/06/28
シャッフルモード