AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 36

Question

A DevOps engineer needs to back up sensitive Amazon S3 objects that are stored within an S3 bucket with a private bucket policy using S3 cross-Region replication functionality. The objects need to be copied to a target bucket in a different AWS Region and account. Which combination of actions should be performed to enable this replication? (Choose three.)

Accepted Answer

Correct answer: A, D, E. The correct answer is A, D, E. Option A: Create a replication IAM role in the source account Option D: Add statements to the target bucket policy allowing the replication IAM role to replicate objects. Option E: Create a replication rule in the source bucket to enable the replication. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 36