Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Developer - Associate · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
By adding a bucket policy that denies S3 actions when the aws:SecureTransport condition is false, you ensure that only requests made over HTTPS are allowed. The condition aws:SecureTransport checks if the request was made using a secure transport (HTTPS). B) Eliminated - s3:x-amz-acl condition relates to access control lists (ACLs) for the objects C) Enforcing the usage of the AWS SDK does not guarantee encryption in transit. D) Eliminated - The bucket-owner-read ACL allows the bucket owner to read the objects, but it does not enforce secure communication
A is the correct answer.
To enforce encryption in transit for interactions with Amazon S3, you can add a bucket policy to the S3 bucket that denies S3 actions when the aws:SecureTransport condition is equal to false. This condition checks whether the requests to S3 are made over a secure (HTTPS) connection.