Which of the following must be done while generating a pre-signed URL in S3 to ensure that the user who is given the pre-signed URL has the permission to upload the object?

Answer options:

A.Ensure the user has write permission to S3.
B.Ensure the user has read permission to S3.
C.Ensure that the person who has created the pre-signed URL has the permission to upload the object to the appropriate S3 bucket.
D.Create a CloudFront distribution.

Answer - C
Option A is INCORRECT because this is not a required step. With a pre-signed URL, the user itself does not need to have the write permission to S3.
Option B is INCORRECT because this is not a required step. With a pre-signed URL, the user itself does not need to have the read permission to S3.
Option C is CORRECT because to upload an object to S3 successfully, the pre-signed URL must be created by someone who has permission to perform the operation that the pre-signed URL is based upon.
Option D is INCORRECT because CloudFront distribution is not needed in this scenario.
For more information on pre-signed URL’s, please visit the below URL
http://docs.aws.amazon.com/AmazonS3/latest/dev/PresignedUrlUploadObject.html