AWS Certified SysOps Administrator – Associate (legacy) — Question 229
You use S3 to store critical data for your company Several users within your group currently have lull permissions to your S3 buckets You need to come up with a solution mat does not impact your users and also protect against the accidental deletion of objects.
Which two options will address this issue? (Choose two.)
Answer options
- A. Enable versioning on your S3 Buckets
- B. Configure your S3 Buckets with MFA delete
- C. Create a Bucket policy and only allow read only permissions to all users at the bucket level
- D. Enable object life cycle policies and configure the data older than 3 months to be archived in Glacier
Correct answer: A, B
Explanation
Enabling versioning on your S3 buckets allows you to preserve, retrieve, and restore every version of every object stored, thus preventing accidental deletions. Configuring MFA delete adds an additional layer of security by requiring multi-factor authentication to delete objects, making it harder for users to accidentally delete critical data. The other options either restrict user permissions or manage data lifecycle without addressing accidental deletions directly.