The security team needs confirmation that every current object in an S3 bucket is encrypted. Which solution provides the most operationally efficient way to verify encryption status across all objects?
Choose an answer
Tap an option to check your answer.
Correct answer: Enable S3 Inventory on the bucket and include the relevant encryption/status fields in the report..
Why this is the answer
Enabling S3 Inventory is the most operationally efficient solution because it provides a daily or weekly flat-file report listing all objects in a bucket, along with their metadata, including encryption status. This automated report can be easily analyzed to confirm encryption across all objects without manual intervention. Writing and running a script to iterate through the bucket is less efficient for large buckets as it consumes compute resources and can be time-consuming. Giving the security team an IAM user with read permissions only allows them to inspect objects manually, which is not scalable for verifying all objects. Using the AWS CLI to list objects and check properties manually is also inefficient and impractical for a large number of objects.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed