
Ultimate access to all questions.
A company's application generates reports and stores them in an Amazon S3 bucket. When users access their reports, the application creates signed URLs for downloading. The security team found that these files are publicly accessible without authentication, leading the company to halt new report generation until the issue is fixed. What measures can be taken to immediately address this security vulnerability without disrupting the application's usual operations?
A
Develop an AWS Lambda function that enforces a deny-all policy for unauthenticated users, and schedule this function to run periodically.
B
Conduct a review of the AWS Trusted Advisor bucket permissions check and follow the advised actions to secure the bucket.
C
Execute a script to apply a private ACL to all objects within the S3 bucket, ensuring they are not publicly accessible.
D
Utilize Amazon S3's Block Public Access feature to set the IgnorePublicAcls option to TRUE, thereby blocking public access to the bucket.