DVA-C02 Question 90

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  A - Amazon Cognito user pool manages user authentication but doesn't directly handle secure file sharing or access delegation to S3. B - S3 presigned URLs allows temporary, secure access to private S3 objects without modifying bucket policies. Ideal for sharing. C - S3 bucket policy controls access permissions for an S3 bucket and its objects, but doesn't facilitate secure sharing with external users directly in a serverless app. D - Amazon Cognito identity pool provides AWS credentials to users, enabling them to access AWS services like S3, but needs to be combined with other features for secure sharing.

• 1

  "Which AWS feature should the company use to share and access the files securely?". A focus on feature not authentication as a whole. The application/Cognito are distractors.

• Chose D2

  A presigned URL doesn't allow you to share files with others. The last line of the question specifically asks which service would give you the ability not only to access but also to share files too. In that case, CIP seems to be the service to give temporary credentials to AWS resources and perform whatever is specified in the bucket policy