Explanation:
A presigned URL gives you a way to grant temporary access to a specific Amazon S3 object. Since the users do not have AWS accounts, generating a presigned URL allows them to download the object securely without requiring AWS credentials or complex IAM configurations. This makes it the most operationally efficient solution.
Ultimate access to all questions.
A SysOps administrator wants to securely share an object from a private Amazon S3 bucket with a group of users who do not have an AWS account. What is the MOST operationally efficient solution that will meet this requirement?
A
Attach an S3 bucket policy that only allows object downloads from the users' IP addresses.
B
Create an IAM role that has access to the object. Instruct the users to assume the role.
C
Create an IAM user that has access to the object. Share the credentials with the users.
D
Generate a presigned URL for the object. Share the URL with the users.
No comments yet.