View all questions & answers for the SAA-C03 exam
What should a solutions architect do to ensure that all objects uploaded to an Amazon S3 bucket are encrypted?
Update the bucket policy to deny if the PutObject does not have an s3 x-amz-acl header set
Update the bucket policy to deny if the PutObject does not have an s3:x-amz-aci header set to private.
Update the bucket policy to deny if the PutObject does not have an aws SecureTransport header set to true
Update the bucket policy to deny if the PutObject does not have an x-amz-server-side-encryption header set.
https://aws.amazon.com/blogs/security/how-to-prevent-uploads-of-unencrypted-objects-to-amazon-s3/#:~:text=Solution%20overview,console%2C%20CLI%2C%20or%20SDK. &text=To%20encrypt%20an%20object%20at,S3%2C%20or%20SSE%2DKMS.
Submit