SAA-C03 Q404 · Security

Question

A media company hosts a web application on AWS for uploading videos. Only authenticated users should upload within a specified time frame after authentication. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Let's map each requirement to the solution:

**Requirement 1: Only authenticated users should upload** → The Lambda function is triggered only after authentication. Unauthenticated users never receive a pre-signed URL, so they cannot upload.

**Requirement 2: Upload within a specified time frame** → S3 pre-signed URLs have a **built-in expiration time** parameter. You set the exact duration (e.g., 15 minutes, 1 hour) when generating the URL. After expiration, the URL becomes invalid — this is a native feature, not custom logic.

**Requirement 3: LEAST operational overhead** → This is the decisive factor:
- **Lambda is serverless** — no servers to manage, no scaling configuration
- **Pre-signed URLs are a native S3 feature** — no custom authorization logic needed
- The user uploads **direct

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips