Which of the below statements are true with regards to Amazon S3 security and access management? Choose 2.

Answer options:

A.Self-created S3 resources are only accessible to the user by default.
B.Access Control Lists (ACLs) could be used to grant time bound access using temporary URLs.
C.By default S3 buckets are private, however, objects are public. The object owner needs to change the permissions upon creation of objects to make the objects private.
D.Amazon Macie can protect data in Amazon EC2.
E.Server-side and client-side encryptions are supported by S3 for data uploads.

Answer: A, E
Option A is CORRECT. Users, by default, have access only to the S3 resources that they have created.
Option B is INCORRECT. Time-bound access using temporary URLs can be provided using query string authentication.
Option C is INCORRECT. By default, both S3 buckets and objects are private.
Option D is INCORRECT. Amazon Macie is a tool to protect the data in Amazon S3 instead of EC2.
Option E is CORRECT. S3 supports both server-side and client-side encryptions.
Reference:
https://aws.amazon.com/s3/security/