S3 Access Log

Which is true about S3 Access Logs?

• For audit purpose, you may want to log all access to S3 buckets

• Any request made to S3, from any account, authorized or denied, will be logged into another S3 bucket

• That data can't be analyzed using data analysis tools…

• All of the above

S3 Replication is

• Asynchronous

• Synchronous

• Asynchronous and synchronous

• None of them

Which isn't true about S3 Replication?

• No need to enable versioning in source and destination

• Two types: CRR and SRR

• Buckets can be in different accounts

• Must give proper IAM permissions to S3

Which is true about S3 Pre-Signed URLs?

• Can generate pre-signed URLs using SDK or CLI • For downloads (easy, can use the CLI) • For uploads (harder, must use the SDK)

• Valid for a default of 3600 seconds, can change timeout with --expires-in [TIME_BY_SECONDS] argument

• Users given a pre-signed URL inherit the permissions of the person who generated the URL for GET / PUT

• All of the above

What is a S3 Storage Class?

• Amazon S3 Standard - General Purpose

• Amazon S3 One Zone-Infrequent Access

• Amazon S3 One Zone

• Amazon S3 Glacier Instant Retrieval

• Amazon S3 Intelligent Tiering

S3 durability is the same for all storage classes. Is it true?

• Yes

• No