A company has an application where reading objects from Amazon S3 is based on the type of user. The user types are registered user and guest user. The company has 25,000 users and is growing. Information is pulled from an S3 bucket depending on the user type. Which approaches are recommended to provide access to both user types? (Choose two.)
A) Provide a different access key and secret access key in the application code for registered users and guest users to provide read access to the objects.
B) Use S3 bucket policies to restrict read access to specific IAM users.
C) Use Amazon Cognito to provide access using authenticated and unauthenticated roles.
D) Create a new IAM user for each user and grant read access.
E) Use the AWS IAM service and let the application assume the different roles using the AWS Security Token Service (AWS STS) AssumeRole action depending on the type of user and provide read access to Amazon S3 using the assumed role.
Correct Answer:
Verified
Q153: A development team wants to run their
Q154: A company has developed a new serverless
Q155: A developer wants to send multi-value headers
Q156: A developer is testing an application that
Q157: A developer is using AWS CodeDeploy to
Q159: A Developer has implemented a Lambda function
Q160: What are the steps to using the
Q161: Given the source code for an AWS
Q162: A company has written a Java AWS
Q163: A web application is using Amazon Kinesis
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents