A Company Is Storing Sensitive User Information in an Amazon

question 281

Multiple Choice

A company is storing sensitive user information in an Amazon S3 bucket. The company wants to provide secure access to this bucket from the application tier running on Amazon EC2 instances inside a VPC. Which combination of steps should a solutions architect take to accomplish this? (Choose two.)

• A) Configure a VPC gateway endpoint for Amazon S3 within the VPC.
• B) Create a bucket policy to make the objects in the S3 bucket public.
• C) Create a bucket policy that limits access to only the application tier running in the VPC.
• D) Create an IAM user with an S3 access policy and copy the IAM credentials to the EC2 instance.
• E) Create a NAT instance and have the EC2 instances use the NAT instance to access the S3 bucket.

---

Definitions:

Hotelkeeper

A person or entity that manages or owns a hotel.

Loss

The harm or suffering experienced due to injury, damage, or the loss of value, often quantifiable for purposes of compensation or insurance.

Damage

The loss or harm resulting from the breach of a legal duty or violation of a legal right, often quantified in financial terms for compensation.

Bailor's Negligence

This term relates to situations where the bailor (the owner of property that is loaned to another party, the bailee) fails to exhibit the care or disclosure expected, possibly leading to harm or loss.