You Are Building a Large, Multi-Tenant SaaS (Software-As-A-Service) Application with a Component

question 78

Multiple Choice

You are building a large, multi-tenant SaaS (software-as-a-service) application with a component that fetches data to process from a customer-specific Amazon S3 bucket in their account. How should you ensure that your application follows security best practices and limits risk when fetching data from customer-owned Amazon S3 buckets?

• A) Have users create an IAM user with a policy that grants read-only access to the Amazon S3 bucket required by your application, and store the corresponding access keys in an encrypted database that holds their account data.
• B) Have users create a cross-account lAM role with a policy that grants read-only access to the Amazon S3 bucket required by your application to the AWS account ID running your production Sass application.
• C) Have users create an Amazon S3 bucket policy that grants read-only access to the Amazon S3 bucket required by your application, and securely store the corresponding access keys in the database holding their account data.
• D) Have users create an Amazon S3 bucket policy that grants read-only access to the Amazon S3 bucket required by your application and limits access to the public IP address of the SaaS application.

---

Definitions:

Indirect Compensation

Benefits provided to employees that are not directly paid out as wages, including health insurance, retirement plans, and paid time off.

Employee Assistance Program (EAP)

A workplace initiative that provides employees with confidential counseling services for personal or work-related issues.

Counselling and Referral Services

Support services offered by employers to assist employees with personal or work-related issues, often involving professional guidance and external resource recommendations.

Seminars and Workshops

Educational and training sessions focused on specific topics or skills, often involving interactive and practical activities to enhance learning.