Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS is retiring this exam on Nov 30, 2026.
Replacement: DVA-C03 Practice Exam
Question 37 of 167
Free Preview · 167 of 554 · questions 1–167 of 554 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B. Allow access when "aws:SecureTransport": "false" ❌ This would allow HTTP instead of enforcing HTTPS. C. Role-based policy on other accounts' roles ❌ The bucket owner controls access, not external accounts. A bucket policy is required. D. Resource-based policy on the KMS key ❌ KMS policies control encryption keys, not transport security. HTTP/HTTPS enforcement must happen at the S3 bucket level.
A) Correct - The condition “aws:SecureTransport”: “false” ensures that only secure requests (encrypted in transit) are allowed. B) Eliminated - This allows access only when the request does not use secure transport. This is opposite of the requirement C) Eliminated - Resource-based policies at the bucket level are better suited for cross-account access. D) Eliminated - The GetObject operation is specific to the S3 bucket, not the KMS key.
aws:SecureTransport condition does not apply to KMS key policies