SAP-C02 Question 304

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose AB1

  BUT, The question is not clearly formulated. Nothing mentions the requirement that a scientist must only access his own folder.

• 1

  the question affirms the following: "The research center's compliance officer is worried that scientists will be able to access each other's work. " it is equal to say that each scientist only must have access to his own data and not other data

• 1

  Option A allows for secure and isolated access to each scientist's personal folder by prefixing the S3 paths with $(aws:username), ensuring that scientists can only access their own documents. This aligns with the research center's compliance officer's concern about preserving data isolation. Option B configures a CloudTrail trail to capture all object-level events in the S3 bucket, providing detailed information on who accessed which documents. This meets the requirement for reporting on document access by scientists.