CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Understanding AWS Security: A Question Breakdown
Explore a key AWS question that tests your knowledge of secure image uploads and access control. Learn the right answer and why others fail.
When it comes to AWS certifications, specific decisions can trip candidates up. This question on secure image uploads and access control is one of them. Understanding the right service combinations is crucial for success.
The question
A startup is developing an application that requires users to upload images securely. The application must ensure that only authorized users can access the uploaded images. Which AWS service combination should they use to meet the security requirements?
A. Amazon S3 with bucket policies
B. AWS CloudTrail with Amazon S3
C. AWS Lambda with Amazon SNS
D. Amazon EC2 with security groups
Think before you scroll
Carefully consider each option's purpose and how it aligns with the requirements for securely uploading and controlling access to images. The focus here is on ensuring proper access control rather than just storage or logging.
The answer
The correct option is A: Amazon S3 with bucket policies. This combination allows the startup to manage permissions effectively, ensuring that only authorized users can access the uploaded images.
Why the other options lose
- B. AWS CloudTrail with Amazon S3: CloudTrail is primarily for logging and monitoring API calls. It does not manage access control for the images uploaded to S3.
- C. AWS Lambda with Amazon SNS: Lambda handles serverless compute, while SNS is for messaging. Neither directly addresses the need for secure image storage and user access control.
- D. Amazon EC2 with security groups: EC2 instances can run applications, but security groups do not provide the necessary file storage or direct access control for uploaded images.
The concept behind it
The principle of access control is central to AWS security. Services like Amazon S3, combined with bucket policies, allow administrators to define specific permissions for users. This ensures that only the right individuals can access sensitive data, such as uploaded images.
Exam trap to remember
Remember: When asked about secure data access in AWS, look for options that explicitly mention access control mechanisms, like bucket policies.