AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 10

Question

A security review has identified that an AWS CodeBuild project is downloading a database population script from an Amazon S3 bucket using an unauthenticated request. The security team does not allow unauthenticated requests to S3 buckets for this project. How can this issue be corrected in the MOST secure manner?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Remove unauthenticated access from the S3 bucket with a bucket policy. Modify the service role for the CodeBuild project to include Amazon S3 access. Use the AWS CLI to download the database population script. Amazon S3 provides durable, scalable object storage that is fully managed. AWS CodeBuild compiles, tests and packages code in a managed build service.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 10