AWS Certified Solutions Architect – Associate (SAA-C03) — Question 263

A solutions architect is implementing a document review application using an Amazon S3 bucket for storage. The solution must prevent accidental deletion of the documents and ensure that all versions of the documents are available. Users must be able to download, modify, and upload documents.

Which combination of actions should be taken to meet these requirements? (Choose two.)

Answer options

• A. Enable a read-only bucket ACL.
• B. Enable versioning on the bucket.
• C. Attach an IAM policy to the bucket.
• D. Enable MFA Delete on the bucket.
• E. Encrypt the bucket using AWS KMS.

Correct answer: B, D

Explanation

Enabling versioning (option B) ensures that all versions of the documents are retained, while enabling MFA Delete (option D) adds an extra layer of protection against accidental deletions. The other options either do not address the requirement for versioning or do not prevent accidental deletions effectively.