AWS Certified Developer – Associate (DVA-C02) — Question 141

A company has an Amazon S3 bucket containing premier content that it intends to make available to only paid subscribers of its website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure of the premier content to non-paying website visitors.

How can the company limit the ability to download a premier content file in the S3 bucket to paid subscribers only?

Answer options

• A. Apply a bucket policy that allows anonymous users to download the content from the S3 bucket.
• B. Generate a pre-signed object URL for the premier content file when a paid subscriber requests a download.
• C. Add a bucket policy that requires multi-factor authentication for requests to access the S3 bucket objects.
• D. Enable server-side encryption on the S3 bucket for data protection against the non-paying website visitors.

Correct answer: B

Explanation

The correct answer is B, as generating a pre-signed URL allows only authenticated paid subscribers to access the premier content file temporarily. Option A is incorrect because it would allow anyone to download the content, negating the exclusivity for subscribers. Option C, while enhancing security, does not specifically limit access to paid subscribers. Option D focuses on data protection but does not control access to the files themselves.