S3 Security

Question 1

Block Public Access

Answer 1

Block Public Access overrides other S3 access permissions to easily enforce a no-public-access policy.

Question 2

Access Points

Answer 2

Access Points simplify managing data access at scale for applications that use shared data sets on Amazon S3. Access points are named network endpoints that are attached to buckets and are used to perform Amazon S3 object operations, such as GetObject and PutObject.

Question 3

Presigned URLs

Answer 3

With Query String Authentication (presigned URLs), you can grant time-limited access to objects with temporary URLs.

Question 4

Encryption

Answer 4

Encryption ensures that your in-transit or at-rest data cannot be opened or read by unintended recipients in the event that the data is intercepted or accessed by unauthorized users.

Question 5

VPC Endopints

Answer 5

A VPC endpoint is a logical entity within a VPC that allows connectivity to AWS services such as Amazon S3. The VPC endpoint routes requests across the Amazon network to S3 and then routes responses back to the VPC