Study. uk . com
  1. Home
  2. All questions
  3. Question 150

AWS Certified Solutions Architect study material · question 150 of 500

How can an account force every upload to a bucket to use SSE-S3?

  1. Enable versioning on the bucket
  2. Attach a permissions boundary to the uploading role
  3. Deny PutObject unless the request carries the server-side-encryption header
  4. Enable Block Public Access on the bucket
Show the answer

Answer: C. Deny PutObject unless the request carries the server-side-encryption header

A bucket policy condition on the encryption header rejects uploads that do not request server-side encryption.

Source: Using server-side encryption with Amazon S3 managed keys (S… (Amazon Web Services) — Using server-side encryption with Amazon S3 managed keys (SSE-S3)

Challenge yourself on this topic → Study as cards