A Company Has an Application Where Reading Objects from Amazon

question 30

Multiple Choice

A company has an application where reading objects from Amazon S3 is based on the type of user. The user types are registered user and guest user. The company has 25,000 users and is growing. Information is pulled from an S3 bucket depending on the user type. Which approaches are recommended to provide access to both user types? (Choose two.)

• A) Provide a different access key and secret access key in the application code for registered users and guest users to provide read access to the objects.
• B) Use S3 bucket policies to restrict read access to specific IAM users.
• C) Use Amazon Cognito to provide access using authenticated and unauthenticated roles.
• D) Create a new IAM user for each user and grant read access.
• E) Use the AWS IAM service and let the application assume the different roles using the AWS Security Token Service (AWS STS) AssumeRole action depending on the type of user and provide read access to Amazon S3 using the assumed role.

---

Definitions:

Competing Products

Goods or services offered by different businesses that seek to satisfy the same customer needs or market demands.

Internal Standard

A benchmark or criterion established within an organization to ensure consistency and quality in its operations or production.

Life-Cycle Costs

The total cost of owning, operating, maintaining, and disposing of a product or system over its life span.

Transactional Costs

Expenses incurred during trading, beyond the price of the goods, including search and information costs, bargaining costs, and enforcement costs.