Study. uk . com
  1. Home
  2. All questions
  3. Question 34

AWS Certified Solutions Architect study material · question 34 of 500

A developer generates a presigned URL for a private S3 object and sends it to an external partner. Whose permissions does the download use?

  1. Those of the bucket owner's root user
  2. Anonymous permissions defined by the bucket ACL
  3. Those of the user who generated the URL
  4. Those of the partner opening the URL
Show the answer

Answer: C. Those of the user who generated the URL

A presigned URL carries the credentials of whoever created it, which is why an over-permissioned signer is a risk.

Source: Sharing objects with presigned URLs (Amazon Web Services) — Sharing an object with a presigned URL

Challenge yourself on this topic → Study as cards