MENU
An application is using Amazon Cognito user pools and identity pools for secure access. A developer wants to integrate the user-specific file upload and download features in the application with Amazon S3. The developer must ensure that the files are saved and retrieved in a secure manner and that users can access only their own files. The file sizes range from 3 KB to 300 MB.
Which option will meet these requirements with the HIGHEST level of security?
Suggested Answer: B
Get Premium DVA-C02 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Global Secondary Index (GSI):GSIs enable alternative query patterns on a DynamoDB table by using different partition and sort keys.
Addressing Query Bottleneck:By making the slow-query attribute the GSI's partition key, you optimize queries on that attribute.
Scalability:GSIs automatically scale to handle increasing data volumes.
32 comments · newest first
CE
Cecilia
11 months ago
Not sure about B, using DynamoDB feels like an extra step for this.
LA
Lashon
11 months ago
I think option C is solid too, Lambda adds a nice layer of validation.
DE
Deandrea
11 months ago
Wait, can you really restrict S3 access that way? Sounds too good to be true!
TA
Tasia
11 months ago
I agree, IAM policies are super effective for access control.
RE
Rebbecca
12 months ago
Option D seems like the best choice for security!
AL
Alaine
12 months ago
I vaguely recall that S3 Event Notifications (option A) are more about triggering actions rather than securing access, so I'm leaning towards option D for the highest security level.
VE
Velda
1 year ago
I practiced a similar question where we had to manage user permissions, and I feel like option B might not be the most secure since it relies on filtering in the UI.
PE
Peggie
1 year ago
I'm not entirely sure, but I think using API Gateway with Lambda (option C) could add an extra layer of validation for uploads and downloads.
JE
Jesse
1 year ago
I remember discussing how IAM policies can help restrict access to specific resources, so option D seems like a strong candidate for security.
SH
Sheron
1 year ago
Option B with the DynamoDB table seems like a good way to track the file details, but I'm not sure if it's the most secure option compared to the others. I'll need to think through the pros and cons of each approach.
EL
Elmira
1 year ago
Based on the details provided, I think Option C is the best choice. Validating each request in the Lambda function before performing the operation seems like the most secure approach.
CA
Casie
1 year ago
I'm a bit confused by the different options. Option C with API Gateway and Lambda sounds interesting, but I'm not sure how it compares to the other options in terms of security.
ER
Erin
1 year ago
This seems like a tricky question, but I think the key is to focus on the security requirements. Option D looks promising since it uses IAM policies to restrict access to user-specific folders in S3.
TR
Truman
1 year ago
I'm a little confused by the wording of this question. What exactly are they looking for in terms of "suitable" suppliers? I'll need to think about that a bit more before making my selections.
AA
Aaron
1 year ago
Hmm, I'm a bit confused on this one. I'm not sure if a VPN gateway or a service endpoint would also work for this scenario. I'll need to review the requirements again carefully.
RO
Rossana
1 year ago
Option A? What is this, amateur hour? S3 Event Notifications to validate file uploads and downloads? That's like using a butter knife to defuse a bomb. Go big or go home, people!
JU
Justine
1 year ago
D) Use an IAM policy within the Amazon Cognito identity prefix to restrict users to use their own folders in Amazon S3.
JO
Joye
1 year ago
C) Use Amazon API Gateway and an AWS Lambda function to upload and download files. Validate each request in the Lambda function before performing the requested operation.
DI
Diane
1 year ago
B) Save the details of the uploaded files in a separate Amazon DynamoDB table. Filter the list of files in the user interface (UI) by comparing the current user ID with the user ID associated with the file in the table.
MA
Markus
1 year ago
I'm gonna have to go with option C on this one. Leveraging the power of Lambda to validate the requests is a brilliant idea. Plus, API Gateway will make the integration with S3 a breeze. *whistles* This is the way to secure those files, my dudes.
DA
Daren
1 year ago
Definitely, leveraging Lambda for validation and using API Gateway for integration sounds like a secure approach.
CH
Cheryl
1 year ago
I agree, it's important to validate each request before performing any operation on the files.
DO
Dominque
1 year ago
Yeah, using API Gateway with Lambda seems like a solid choice for securing the file uploads and downloads.
JI
Jina
1 year ago
Option C sounds like the way to go. Lambda can really help validate those requests.
IZ
Izetta
2 years ago
Hmm, option D sounds interesting. Using the IAM policy within the Cognito identity prefix could be a neat way to handle the file access control. But I'm curious how well it would scale for large file sizes and high volumes of requests.
BL
Blondell
2 years ago
I'm not too sure about option B. Storing the file details in a separate DynamoDB table feels a bit convoluted. I think the direct integration with S3 through a Lambda function is a cleaner and more secure solution.
DE
Desirae
2 years ago
Option C looks like the way to go. Validating each request in the Lambda function adds an extra layer of security, and using API Gateway to handle the uploads and downloads seems like a smart approach.
CL
Clarinda
1 year ago
I agree, using API Gateway and Lambda for file operations ensures that each request is validated before any action is taken. It's definitely a secure way to handle user-specific file uploads and downloads.
JE
Jean
1 year ago
Option C looks like the way to go. Validating each request in the Lambda function adds an extra layer of security, and using API Gateway to handle the uploads and downloads seems like a smart approach.
CA
Caitlin
2 years ago
I'm not sure, but option C also sounds secure with API Gateway and Lambda function validation.
MU
Murray
2 years ago
I agree with Rodrigo. Option D seems to provide the highest level of security by restricting access to user-specific folders.
RO
Rodrigo
2 years ago
I think option D is the best choice because it restricts users to their own folders in S3.