AWS Certified Solutions Architect – Associate (SAA-C03) — Question 848

A global company runs its workloads on AWS. The company's application uses Amazon S3 buckets across AWS Regions for sensitive data storage and analysis. The company stores millions of objects in multiple S3 buckets daily. The company wants to identify all S3 buckets that are not versioning-enabled.

Which solution will meet these requirements?

Answer options

• A. Set up an AWS CloudTrail event that has a rule to identify all S3 buckets that are not versioning-enabled across Regions.
• B. Use Amazon S3 Storage Lens to identify all S3 buckets that are not versioning-enabled across Regions.
• C. Enable IAM Access Analyzer for S3 to identify all S3 buckets that are not versioning-enabled across Regions.
• D. Create an S3 Multi-Region Access Point to identify all S3 buckets that are not versioning-enabled across Regions.

Correct answer: B

Explanation

Amazon S3 Storage Lens provides centralized, organization-wide visibility into object storage usage and activity, including specific metrics that identify buckets with versioning disabled. AWS CloudTrail and IAM Access Analyzer are not designed to aggregate and report on configuration states like versioning status across all buckets. S3 Multi-Region Access Points are routing mechanisms for global applications and cannot be used to audit bucket configuration settings.