An Organization Stores Sensitive Customer in S3 Buckets Protected by Bucket

question 278

Multiple Choice

An organization stores sensitive customer in S3 buckets protected by bucket policies. Recently, there have been reports that unauthorized entities within the company have been trying to access the data on those S3 buckets. The Chief Information Security Officer (CISO) would like to know which buckets are being targeted and determine who is responsible for trying to access that information. Which steps should a SysOps Administrator take to meet the CISO's requirement? (Choose two.)

• A) Enable Amazon S3 Analytics on all affected S3 buckets to obtain a report of which buckets are being accessed without authorization.
• B) Enable Amazon S3 Server Access Logging on all affected S3 buckets and have the logs stored in a bucket dedicated for logs.
• C) Use Amazon Athena to query S3 Analytics report for HTTP 403 errors, and determine the IAM user or role making the requests.
• D) Use Amazon Athena to query the S3 Server Access Logs for HTTP 403 errors, and determine the IAM user or role making the requests.
• E) Use Amazon Athena to query the S3 Server Access Logs for HTTP 503 errors, and determine the IAM user or role making the requests.

---

Definitions:

Ownership Interest

The rights to the benefits and responsibilities of ownership in a property or company, typically quantifiable as shares or a percentage.

Condominium Interest

An ownership interest in a unit within a multi-unit property, coupled with a shared interest in the common areas of the property.

Exclusive Ownership

The right to use, manage, and dispose of property without interference from others, ensuring complete control over the asset.

Joint Tenancy

A form of co-ownership where parties own property equally with rights of survivorship, meaning if one owner dies, the other automatically inherits the deceased owner's share.