A security administrator is setting up a new AWS account.The security administrator wants to secure the data that a company stores in an Amazon S3 bucket.The security administrator also wants to reduce the chance of unintended data exposure and the potential for misconfiguration of objects that are in the S3 bucket.
Which solution will meet these requirements with the LEAST operational overhead?
Configure the S3 Block Public Access feature for the AWS account.
Configure the S3 Block Public Access feature for all objects that are in the bucket.
Deactivate ACLs for objects that are in the bucket.
Use AWS PrivateLink for Amazon S3 to access the bucket.
I conclude that the answer is:
Configure the S3 Block Public Access feature for the AWS account.