Free SAA-C03 Web TestEngine Demo

Q35 Single choice

A company operates multiple VPCs in a single AWS account. Account users need temporary access to Amazon S3 buckets. The S3 buckets are private and have no public endpoints.

The solution must follow the principle of least privilege for access to each environment and must avoid distributing permanent access keys.

Which solution will meet these requirements?

A
Create a gateway VPC endpoint for Amazon S3 in each VPC. Attach an endpoint policy that allows only environment-scoped IAM roles to access the S3 buckets.
B
Configure the S3 buckets to use SSE-S3. Create bucket policies that allow access only from the VPC CIDR blocks.
C
Define separate S3 access points for each environment. Allow users to assume a role associated with the access points. Use the default Amazon S3 endpoints.
D
Route S3 traffic through a NAT gateway. Configure bucket policies that allow traffic only from the NAT gateway's public IP addresses.

SAA-C03 Web TestEngine demo