AWS Certified SysOps Administrator Practice Exam

How can you provide write access to users uploading their profile pictures to an S3 bucket?

1. Federate the users with AWS IAM

2. Federate the users with Cognito

3. Set S3 bucket permissions to public

4. Use AWS Lambda for processing uploads

The correct answer is: Federate the users with Cognito

To provide write access to users uploading their profile pictures to an S3 bucket, federating the users with Amazon Cognito is the most suitable approach. Amazon Cognito enables you to manage user registration, authentication, and access control, allowing you to create a secure environment for your users to upload content. By using Cognito, you can set up user pools and identity pools, which facilitate authentication and provide temporary AWS credentials with permissions to access certain resources, including the S3 bucket. This way, as users authenticate through Cognito, they are granted specific permissions defined in your IAM roles, allowing them to upload files to the S3 bucket without making the bucket publicly accessible. This maintains security while allowing users the required access to upload their profile pictures. Other methods listed in the options either compromise security or do not directly address the requirement of managing temporary access permissions effectively, making them less suitable for this scenario.