Machine-translated by Google. Questions are authored in English.
Top

Discussion

All of the following reduce the risk of an exposed storage bucket EXCEPT

  • A.automated scanning of every bucket policy
  • B.requiring approval for any policy change
  • C.enabling server side encryption on the bucket
  • D.an account level block on all public access

Answer: C

Encryption does not change who may call the service and read the objects, so a public bucket of encrypted objects is still a public bucket. The other three all act on the access policy itself. Access is decided before any object is fetched, so that is where the control belongs.

No comment is present. Be the first to comment.
Loading…

Post your comment

Please log in or register to post a comment.