Question
A CloudOps engineer is responsible for a company’s disaster recovery procedures. The company has a source Amazon S3 bucket in a production account, and it wants to replicate objects from the source to a destination S3 bucket in a nonproduction account. The CloudOps engineer configures S3 cross-Region, cross-account replication to copy the source S3 bucket to the destination S3 bucket. When the CloudOps engineer attempts to access objects in the destination S3 bucket, they receive an Access Denied error.
Which solution will resolve this problem?
- A. Modify the replication configuration to change object ownership to the destination S3 bucket owner. Correct
- B. Ensure that the replication rule applies to all objects in the source S3 bucket and is not scoped to a single prefix.
- C. Retry the request when the S3 Replication Time Control (S3 RTC) has elapsed.
- D. Verify that the storage class for the replicated objects did not change between the source S3 bucket and the destination S3 bucket.
Explanation
The correct answer is A because, according to AWS documentation, when using cross-account replication in Amazon S3, the default object ownership setting retains the original owner of the objects. Changing the object ownership to the destination S3 bucket owner allows the CloudOps engineer to access the replicated objects without receiving an Access Denied error.
