Certified Solutions Architect S3 Storage Classes and Policies Flashcards
7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Certified Solutions Architect S3 Storage Classes and Policies flashcards as text
A company must prevent any S3 bucket in their AWS account from being made public. Which service-level control achieves this across all buckets?
Answer: S3 Block Public Access at the account level
S3 Block Public Access settings applied at the account level override any individual bucket or object ACL/policy that would grant public access.
What is the durability guarantee provided by S3 Standard, Standard-IA, Glacier, and most other S3 storage classes?
Answer: 99.999999999% (11 nines)
All major S3 storage classes provide 99.999999999% (11 nines) durability by storing data redundantly across multiple AZs (except One Zone-IA).
An application reads a small subset of data from large Glacier-archived CSV files. Which feature avoids restoring full objects?
Answer: Glacier Select
Glacier Select lets you run SQL queries directly against archived objects, retrieving only the required subset without restoring the entire file.
Which S3 Intelligent-Tiering tier requires the user to explicitly opt in because it adds latency to object retrieval?
Answer: Deep Archive Access tier
The Deep Archive Access tier in Intelligent-Tiering must be explicitly activated; it has retrieval times up to 12 hours but offers the lowest storage cost.
A lifecycle rule moves objects to S3 Standard-IA after 30 days and to Glacier after 90 days. When does the Glacier transition occur relative to object creation?
Answer: 90 days after object creation
Lifecycle transition days are always counted from the object's creation date, so the Glacier transition occurs at 90 days post-creation regardless of earlier transitions.
Which condition in an S3 bucket policy restricts uploads so that only objects with a specific tag key-value pair are accepted?
Answer: s3:RequestObjectTag/
The s3:RequestObjectTag/ condition evaluates tags included in the PutObject request, allowing policies to enforce required tagging at upload time.
What is the availability SLA for S3 One Zone-IA compared to S3 Standard-IA?
Answer: 99.5% vs 99.9%
S3 One Zone-IA offers 99.5% availability while S3 Standard-IA offers 99.9% availability, reflecting the single-AZ risk of One Zone-IA.