AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 907

Question

A company wants to use an AWS CloudFormation stack for its application in a test environment. The company stores the CloudFormation template in an Amazon S3 bucket that blocks public access. The company wants to grant CloudFormation access to the template in the S3 bucket based on specific user requests to create the test environment. The solution must follow security best practices. Which solution will meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create a presigned URL for the template object. Configure the CloudFormation stack to use the presigned URL. AWS Config tracks resource configuration changes and evaluates compliance. AWS CloudFormation provisions infrastructure as code repeatably.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 907