A Company Is Using an AWS CodeBuild Project to Build

question 486

Multiple Choice

A company is using an AWS CodeBuild project to build and package an application. The packages are copied to a shared Amazon S3 bucket before being deployed across multiple AWS accounts. The buildspec.yml file contains the following: The DevOps Engineer has noticed that anybody with an AWS account is able to download the artifacts. What steps should the DevOps Engineer take to stop this?

• A) Modify the post_build to command to use --acl public-read and configure a bucket policy that grants read access to the relevant AWS accounts only. Modify the post_build to command to use --acl public-read and configure a bucket policy that grants read access to the relevant AWS accounts only.
• B) Configure a default ACL for the S3 bucket that defines the set of authenticated users as the relevant AWS accounts only and grants read-only access.
• C) Create an S3 bucket policy that grants read access to the relevant AWS accounts and denies read access to the principal "*"
• D) Modify the post_build command to remove --acl authenticated-read and configure a bucket policy that allows read access to the relevant AWS accounts only. post_build command to remove --acl authenticated-read and configure a bucket policy that allows read access to the relevant AWS accounts only.

---

Definitions:

Rent Expense

The cost incurred by a company or individual for the use of a property or equipment.

Service Revenue

Income generated from providing services to clients or customers.

Salaries And Wages Expense

The total amount spent by a business on employee compensation.

Accounting Equation

The accounting equation is a fundamental principle of financial accounting that states that assets equal liabilities plus equity, providing the foundation for double-entry bookkeeping.