A SysOps Administrator is attempting to configure Same-Region Replication (SRR) between two Amazon S3 buckets in the same AWS account using the AWS CLI. The administrator has already enabled versioning on the source S3 bucket and created an IAM role with the correct permissions policy to replicate objects. However, when executing the `put-bucket-replication` CLI command, the administrator receives validation and permissions errors, preventing the replication configuration from being applied. Which two actions must the SysOps Administrator take to successfully establish replication? (Select two.)
- Enable versioning on the destination S3 bucket.Cevap
- Attach an IAM policy to the IAM user running the CLI command that grants the iam:PassRole permission for the replication IAM role.Cevap
- CSuspend versioning on the source S3 bucket so that both buckets are in the same versioning state.
- DAdd a statement to the trust policy of the replication IAM role that allows the IAM user running the CLI command to perform the sts:AssumeRole action.
- EAttach an IAM policy to the replication IAM role that allows the role to grant iam:PassRole to the S3 service principal.
Cevap
To successfully establish replication, the administrator must enable versioning on the destination S3 bucket and attach an IAM policy to the IAM user running the CLI command that grants the iam:PassRole permission for the replication IAM role.
Establishing S3 Same-Region Replication (SRR) via the AWS CLI requires that both the source and destination buckets have versioning enabled. Additionally, the IAM user executing the CLI command must have the iam:PassRole permission to pass the replication role to the S3 service principal.
Adım Adım Çözüm
Anahtar Kavram
Amazon S3 replication requires versioning to be enabled on both source and destination buckets, and configuring replication via API/CLI requires the configuring user to have the iam:PassRole permission to pass the replication role to Amazon S3.