AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 74

Question

A company is using an AWS CodeBuild project to build and package an application. The packages are copied to a shared Amazon S3 bucket before being deployed across multiple AWS accounts. The buildspec.yml file contains the following: The DevOps engineer has noticed that anybody with an AWS account is able to download the artifacts. What steps should the DevOps engineer take to stop this?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Modify the post_build command to remove --acl authenticated-read and configure a bucket policy that allows read access to the relevant AWS accounts only. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 74