SAA-C03 Q314 · Storage

Question

How can a law firm make files publicly readable while preventing modifications or deletions until a specific future date?

Accepted Answer

Option B satisfies every requirement:

1. **Publicly readable files**: A CloudFront distribution serves as the public-facing layer, allowing anyone to read the files without direct S3 access. The bucket policy restricts access so that only CloudFront (via an Origin Access Control/OAC or Origin Access Identity/OAI) can reach the bucket — this is the proper pattern for public read access to S3 content.

2. **Prevent modifications or deletions until a specific date**: **S3 Object Lock** in Compliance mode (or Governance mode) with a **retention period** set to the target future date ensures that no one — not even the root account in Compliance mode — can delete or overwrite the objects until that date expires.

3. **S3 Versioning is enabled**: This is a **mandatory prerequisite** for S3 Objec

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips