A Company Is Using an AWS CodeBuild Project to Build

question 345

Multiple Choice

A company is using an AWS CodeBuild project to build and package an application. The packages are copied to a shared Amazon S3 bucket before being deployed across multiple AWS accounts. The buildspec.yml file contains the following: The DevOps Engineer has noticed that anybody with an AWS account is able to download the artifacts. What steps should the DevOps Engineer take to stop this?

• A) Modify the post_build to command to use --acl public-read and configure a bucket policy that grants read access to the relevant AWS accounts only. Modify the post_build to command to use --acl public-read and configure a bucket policy that grants read access to the relevant AWS accounts only.
• B) Configure a default ACL for the S3 bucket that defines the set of authenticated users as the relevant AWS accounts only and grants read-only access.
• C) Create an S3 bucket policy that grants read access to the relevant AWS accounts and denies read access to the principal "*"
• D) Modify the post_build command to remove --acl authenticated-read and configure a bucket policy that allows read access to the relevant AWS accounts only. Modify the post_build command to remove --acl authenticated-read and configure a bucket policy that allows read access to the relevant AWS accounts only.

---

Definitions:

Acquaintances

Individuals one knows but with whom one is not particularly close, usually part of one's wider social circle.

Stress Resistance

The ability of an individual to withstand or manage stress without succumbing to its negative effects on mental and physical health.

Behavior Pattern

A recurrent way of acting by an individual or group towards a given object or in a given situation.

Hardiness

A personality trait characterized by resilience and the ability to endure difficult conditions.