Which S3 storage solution archives private documents at the lowest cost?

Answer Correct answer: A — Use S3 One Zone-IA as the default storage class for the private archive bucket accessed through the S3 interface endpoint.

A company is planning to store a large number of archived documents and make the documents available to employees through the corporate intranet. Employees will access the system by connecting through a client VPN service that is attached to a VPC. The data must not be accessible to the public. The documents that the company is storing are copies of data that is held on physical media elsewhere. The number of requests will be low. Availability and speed of retrieval are not concerns of the company. Which solution will meet these requirements at the LOWEST cost?

  1. Create an Amazon S3 bucket. Configure the S3 bucket to use the S3 One Zone-Infrequent Access (S3 One Zone-IA) storage class as default. Configure the S3 bucket for website hosting. Create an S3 interface endpoint. Configure the S3 bucket to allow access only through that endpoint. Correct Answer
  2. Launch an Amazon EC2 instance that runs a web server. Attach an Amazon Elastic File System (Amazon EFS) file system to store the archived data in the EFS One Zone-Infrequent Access (EFS One Zone-IA) storage class Configure the instance security groups to allow access only from private networks.
  3. Launch an Amazon EC2 instance that runs a web server Attach an Amazon Elastic Block Store (Amazon EBS) volume to store the archived data. Use the Cold HDD (sc1) volume type. Configure the instance security groups to allow access only from private networks.
  4. Create an Amazon S3 bucket. Configure the S3 bucket to use the S3 Glacier Deep Archive storage class as default. Configure the S3 bucket for website hosting. Create an S3 interface endpoint. Configure the S3 bucket to allow access only through that endpoint.

Community Insight

The exam tests choosing an S3 storage class by access pattern, cost, and retrieval latency, not by picking the absolute cheapest storage tier; the trap is Glacier Deep Archive's restore workflow and website-hosting incompatibility.

This SAP-C02 scenario asks for the lowest-cost way to serve archived documents privately to employees through a VPC-attached client VPN. S3 One Zone-IA is the correct answer because the archive is a copy, requests are low, and one-zone durability is acceptable when speed and availability are not concerns.

Many learners choose Glacier Deep Archive (D) because it has the lowest per-GB storage price, overlooking restore delays, retrieval costs, and the fact that archived objects cannot be served directly by S3 website hosting.

Community Discussion (147 comments)

bougyz 👍 1 Selected: D
D gives you the same security and access pattern at a fraction of the cost, making it the right choice for archival data with low retrieval frequency.
MKarmakar 👍 1 Selected: D
D- Availability and speed of retrieval are not concerns of the company.
rahav 👍 1 Selected: C
S3 website endpoints support publicly accessible content. Website hosting commonly requires disabling S3 Block Public Access and granting public s3:GetObject permissions. An S3 interface endpoint does not turn the S3 website endpoint into a private endpoint; website endpoints are not accessed through AWS PrivateLink interface endpoints. https://docs.aws.amazon.com/AmazonS3/latest/userguide/WebsiteEndpoints.html
apk123457890 👍 1 Selected: D
D. S3 Glacier Deep Archive + Interface Endpoint Glacier Deep Archive is the cheapest storage class in AWS for long-term archival. Retrieval is slow (hours), but that’s acceptable here. Private access via S3 interface endpoint ensures no public exposure. Website hosting is unnecessary but can be ignored if bucket policy restricts access. Cost: Lowest among all options → Correct choice.
jhxetc 👍 1 Selected: D
D. Is the correct answer. The reason for configuring website hosting is so that DNS can be used with the intranet domain name, not to actually serve content as a website. This allows people to request the document and return when it is restored. It is by far the most cost effective option and frankly, whenever a question uses the terms "no concern on retrieval time," Glacier is the answer they are going for.
eboehm 👍 3 Selected: C
Its really interesting reading all of these answers. I honestly think this question is messed up or intended to really trick you. No one in all of these answers ever mention that if you use static web hosting you CANNOT connect it to an s3 interface endpoint. This makes C the only valid low cost option.
b0969fd 👍 3 Selected: A
Ok, for those answering D, try to create an S3 bucket and "configure the S3 bucket to use the S3 Glacier Deep Archive storage class as default."
OM_mero 👍 1 Selected: D
speed of retrieval are not concerns of the company, so defiantly it's D .
arisa_seobomi 👍 3 Selected: A
I tried it out. I uploaded identical HTML files to an S3 bucket, specifying each storage class. When using the Glacier storage class, I received a 403 error when accessing the web. Therefore, the answer is the One Zone-Infrequent Access (S3 One Zone-IA) storage class, and option A is correct.
seyik 👍 2
Glacier and Glacier Deep Archive objects are not immediately readable. You must restore them before GET works. Hitting them via a website endpoint will return 403 until a restore completes.
17Master 👍 1 Selected: D
No menciona appweb, pero si menciona "La disponibilidad y la velocidad de recuperación no son preocupaciones de la empresa".
Nano6 👍 1 Selected: D
A (S3 One Zone-IA): More expensive than Glacier Deep Archive for long-term archival. B (EFS One Zone-IA) & C (EBS sc1): Higher cost for large archival storage, unnecessary compute.
strike3test 👍 1 Selected: D
Although option D mentions configuring the S3 bucket for website hosting, the key part is restricting access via an S3 VPC endpoint, ensuring data is not publicly exposed. The website hosting configuration can be ignored or omitted if only intranet access is required, or simply means enabling bucket policies for the intranet use
strike3test 👍 1 Selected: A
There is no practical way to serve a website directly from Glacier Deep Archive storage class objects due to retrieval delays and costs.
princajen 👍 2 Selected: D
Even though Option D includes a technically incompatible feature (website hosting), the rest of the solution matches the requirements best - lowest cost, secure private access, and appropriate storage class.
sergza888 👍 1 Selected: A
i liked D but it has "Configure the S3 bucket for website hosting." as part of the answer and that is a deal breaker You can not do it if you configured your Bucket as Glacier deep
Kaps443 👍 1 Selected: A
All components work, supports website hosting, low cost
thiagodotoli 👍 1 Selected: D
A questão não aborda hospedagem. A intranet já existe e fará a consulta no S3. Geralmente armazenamento MENOR custo e que não tenha tempo de recuperação a resposta é o Glacier.
calcinator423 👍 1 Selected: D
"speed of retrieval does not matter" = s3 glacier deep archive. Although S3 Glacier Deep Archive can't be used for website hosting, you also don't need it because you're accessing the documents via the S3 interface endpoint via the intranet.
Barrieta 👍 1 Selected: D
Why D is correct: S3 Glacier Deep Archive is the lowest-cost storage class designed for rarely accessed data, which fits the use case perfectly. Access through an S3 interface endpoint ensures that data is not exposed to the public internet, meeting the security requirement. Hosting the files through S3 website hosting (even though retrieval is slow) provides a simple mechanism for access via intranet (assuming internal DNS can resolve the endpoint). There’s no need to run or manage EC2 instances, no web servers, and no block or file storage, reducing both operational overhead and cost.
ausl 👍 1 Selected: A
A - Glacier Deep Archive can't be used for web hosting, regardless if the company says retrieval time is no concern.
proawsk 👍 2 Selected: D
Why are people bringing in webhosting here, it said it would be accessible over corporate intranet. So their they can implement to raise a request for accessing any archive and once it's ready they can share a link that can be accessed over the intranet. So D is the right answer.
BennyMao 👍 1 Selected: D
S3 Glacier Deep Archive will be the lowest cost.
eberhe900 👍 3 Selected: D
The question does not require website hosting. Its focus is on securely storing documents so employees can access them via VPN without exposing them to the public Internet. So Glacier Deep Archive is more cost-saving
ahhatem 👍 3 Selected: D
Buckets do not have a storage class... objects do! You can enable web hosting on any bucket and retrieve the objects (when available) over HTTP, whether the objects are available instantly or not that is another question. For glacier, you will have to request a restore and wait but when the object is eventually ready, you can download it directly over HTTP. So, the answer is D.
Heman31in 👍 1 Selected: A
S3 glacier can be used for hosting as it requires additional steps to unarchive objects!
wem 👍 1 Selected: A
No, Amazon S3 Glacier Deep Archive cannot be used for web hosting. Reasons: Glacier Deep Archive is not designed for real-time access: Glacier Deep Archive is intended for long-term, infrequently accessed archival data. Retrieval times can range from 12 hours to 48 hours, making it unsuitable for serving content dynamically or in real-time through a website. No direct web hosting capabilities: S3 web hosting requires immediate availability of objects stored in the bucket. S3 Glacier Deep Archive is designed for delayed access, so objects stored in this class cannot be served directly. Storage class retrieval process: Objects stored in Glacier or Glacier Deep Archive require a retrieval job to be initiated before they are available for access. This process is asynchronous and incompatible with the demands of a web-hosting use case.
TariqKipkemei 👍 1 Selected: D
keywords: 'Archive documents, low requests, low availability and speed, LOWEST cost' = S3 Glacier Deep Archive
TewatiaAmit 👍 1 Selected: A
only A & D make sense, and since website hosting is also a requirement, I'll go with A.
c73bf38 👍 4 Selected: A
The requirements are to store a large number of archived documents that are not publicly accessible, and make them available to employees through a corporate intranet. As the number of requests is low and speed of retrieval is not a concern, we can use the low-cost S3 One Zone-Infrequent Access (S3 One Zone-IA) storage class. We can configure the S3 bucket for website hosting and create an S3 interface endpoint to allow access to the documents only through the corporate intranet. This solution is the lowest cost as it eliminates the need to launch and manage EC2 instances. Option B and C involve launching an EC2 instance which increases the operational overhead and is more expensive than using S3. Also, EFS One Zone-IA storage class is not recommended for storing large files. Option D involves using the S3 Glacier Deep Archive storage class which is intended for long-term archival storage of data and not suitable for retrieving data frequently.
MRL110 👍 1
S3 interface endpoint doesn't support web hosting. The question does not say large files, but large number of archived documents, which could be small-sized. Hence EFS OZ-IA (being cheaper than SC1) could be the right answer.
zejou1 👍 4 Selected: A
https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html Store large number of archived docs, and available through corp intranet. Copies of data held on physical media elsewhere (could be re-created). Requests low (but it doesn't say RARE so think monthly/quarterly). "AVAILABILITY" and speed of retrieval are not concerns. It is A, yes Glacier is "cheaper", but I have to leave the archives for at least 180 days, would be available on corp intranet and it is more cost-effective if I want to migrate the data to Glacier if I monitor use and see it is "rarely" touched and know I have to hold it due to regulatory for at minimal 180 days.
hobokabobo 👍 4 Selected: A
While D is most probably the cheapest solution. When you try to download an object in deep archive you get a warning that it is not possible. You need to retrieve it: got to actions and restore which will need at least 12 hours for deep archive. Only after that you can access the document. The answer D says enable webhosting: thats afaik not going to work but users will end up in above mentioned warning. Therefore we need to go for A which is not as cheap but users can access the documents.
bur4an 👍 3 Selected: A
Given the requirements and the need for the lowest cost solution, the best option would be: A. Create an Amazon S3 bucket. Configure the S3 bucket to use the S3 One Zone-Infrequent Access (S3 One Zone-IA) storage class as default. Configure the S3 bucket for website hosting. Create an S3 interface endpoint. Configure the S3 bucket to allow access only through that endpoint. Options B and C involve launching EC2 instances which would add unnecessary complexity and cost since the company's priority is to minimize costs. Additionally, option D involves using the S3 Glacier Deep Archive storage class which is intended for long-term archival data and has longer retrieval times, making it less suitable for the given requirements.
shaaam80 👍 2 Selected: A
Answer A. B and C are not relevant. D is close to create confusion but can't be used as an option for 2 reasons: 1. You can't create a S3 bucket with Glacier deep archive as a default storage class. Need lifecycle transition from any other S3 classes. 2. S3 Glacier deep archive can't be used for website hosting.
_Jassybanga_ 👍 2
1 You can create - read here https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html 2> Yes you are correct on this - So will go with answer A too..
atirado 👍 2 Selected: A
Option A - This option will work and S3 One Zone is a cheap storage solution for a large number of documents Option B - This option might not work: Nothing is said in the question about whether the Client VPN is connecting to a private subnet. Moreover, EFS might not be a cheap storage solution for a large number of documents Option C - This option might not work: Nothing is said in the question about whether the Client VPN is connecting to a private subnet. Moreover, EBS Cold HDD might not be a cheap storage solution for a large number of documents Option D - This option will not work: S3 Deep Glacier Vaults cannot be configured for static hosting. You would need to write an application for accessing the archives.
a54b16f 👍 8 Selected: A
pay attention to "copies of data that is held on physical media elsewhere", this is hint for one zone. Using Glacier is possible in theory, but won't work out of box. Need to develop a whole new application to submit unarchive request when user request a file, wait for up to 48 hour, create the s3 link, notify the user and ask user to come back to view the file. This is ANOTHER application
kz407 👍 1
This! It's also worth mentioning that, the application we have to develop for option D, will be very difficult, if not impossible to be hosted in S3, because it will be a stateful application.
24Gel 👍 2
I agree, "copies of data that is held on physical media elsewhere", this is hint for one zone, However, it could be multiple zone as well. Availability and speed of retrieval are not concerns of the company. So I go with D
red_panda 👍 1 Selected: A
For me is A. I'm not sure that S3 Glacier Deep Archive can be used as website. Also more than 12 hours to retrieve is so much for documental systems (also if is not a concern the speed up). Going with A
Smart 👍 2 Selected: A
Objects in Glacier Deep Archive needs to be 'restored'. A click on simple static website will not make AWS API call to restore the object and make it available.
TonytheTiger 👍 1 Selected: D
Option D: 2 major points for the company. 1. Availability and speed of retrieval are NOT concerns of the company. 2. Meets these requirements at the LOWEST cost. Only S3 Glacier Deep Archive gives the company those requirement. The questions doesn't state how fast the employees need to access the files but the company does, see point 1. S3 Glacier Deep Archive is the lowest-cost storage option in AWS. Standard-IA and S3 One Zone-IA objects are available for millisecond access https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html
Helpnosense 👍 1 Selected: A
The answer is A. D is wrong because the data stored on Glacier Deep Archive can't be accessed directly without initiating a retrieval request to restore the data to either S3 Standard or S3 Standard-IA first. Needless to say, use it as static web site.
Eduman 👍 1
A - Even Deep Glacier is lowest cost and company says retrieval time is no concern, Deep Glacier cannot be used for web hosting.
amministrazione 👍 1
A. Create an Amazon S3 bucket. Configure the S3 bucket to use the S3 One Zone-Infrequent Access (S3 One Zone-IA) storage class as default. Configure the S3 bucket for website hosting. Create an S3 interface endpoint. Configure the S3 bucket to allow access only through that endpoint.
MAZIADI 👍 1 Selected: A
A because : No web static hosting on Glacier deep archive + Glacier is the cheapest but can be more expensive than One zone-IA if the employees retrieve the document (retrieval costs are high) + timeout on the front-end because it will take hours to retrieve the file.
eboehm 👍 1
its not A either though because the question states the data should not be made public and website hosting violates this... also you can not use endpoints with an s3 website
5ehjry6sktukliyliuliykutjhy 👍 2
I went with D so did ChatGPT yet the majority of folks have chosen A ...How do we know what is the exact answer...I see why One Zone IA should be used but I am not confident, please help
8693a49 👍 4
You cannot have a website on Glacier, so D is clearly wrong. To retrieve documents from Glacier you need to first call 'restore' on it. The object becomes available after considerable amount of time in standard storage class a for a limited duration. This wouldn't work on a static website. I suppose technically you could build a non-static application to manage restoring files for users, but it's awkward, and the solution would likely cost more due to development costs. Glacier's purpose is to store data that you never want to see again, but there is a 0.001% chance you might actually need it at some point. It is comparable to tape storage. ChatGPT cannot answer these questions accurately because it is unable to reason.
cnethers 👍 1
The cheapest storage tier in Amazon S3 that can be used for static web hosting is the Amazon S3 Standard - Infrequent Access (S3 Standard-IA). While it offers lower costs compared to the S3 Standard storage class, it is designed for data that is accessed less frequently but still requires rapid access when needed.
cnethers 👍 1
Here's a quick comparison of the relevant S3 storage classes: Amazon S3 Standard: Designed for frequently accessed data. Low latency and high throughput performance. Suitable for websites with dynamic content and frequent access.
cnethers 👍 1
Amazon S3 Standard-IA (Infrequent Access): Lower storage cost than S3 Standard. Suitable for infrequently accessed data that still requires rapid access when needed. There is a retrieval fee per GB when accessing the data.
cnethers 👍 1
Amazon S3 One Zone-IA: Even lower cost than S3 Standard-IA. Stores data in a single availability zone, which makes it less resilient than S3 Standard-IA. Suitable for infrequently accessed data that does not require high availability.
cnethers 👍 1
Amazon S3 Glacier and S3 Glacier Deep Archive: Much cheaper storage options. Designed for long-term archival and infrequently accessed data. Retrieval times range from minutes (S3 Glacier) to hours (S3 Glacier Deep Archive). Not suitable for static web hosting due to high latency in data retrieval.
gfhbox0083 👍 1
A for sure. S3 One Zone-IA is ideal for customers who want a lower-cost option for infrequently accessed data but do not require the availability and resilience of S3.
lighthouse85 👍 1 Selected: A
Cannot Glacier
titi_r 👍 4
How can “A” or “D” be correct even though interface endpoint (PrivateLink) for S3 does NOT support Website endpoints!? https://docs.aws.amazon.com/AmazonS3/latest/userguide/privatelink-interface-endpoints.html#privatelink-limitations
MoT0ne 👍 1 Selected: D
LOWEST cost when compared with A
gustori99 👍 2
B and C does not make sense. BUT A and D also contains nonsense information. It is not possible to configure a bucket to use S3 One Zone-IA storage class or Glacier storage class as default. You can only specify a different storage class during upload. Also configuring bucket for website hosting does not make sense because a website endpoint is only accessible from the public internet (if the bucket policy allows it) and it is not supported for interface endpoint.
gustori99 👍 2
B and C does not make sense. BUT A and B also contains nonsense information. It is not possible to configure a bucket to use S3 One Zone-IA storage class or Glacier storage class as default. Standard storage class is always default and cannot be changed. You can only specify a different storage class during upload. Also lifecycle policy cannot help because it allows transition to S3 One-Zone-IA only after 30 days. Configuring bucket for website hosting does not make sense because a website endpoint is only accessible from the public internet (if the bucket policy allows it) and it is not supported for interface endpoint.
liux99 👍 2
Confusion here is A and D. D is cheaper but is not viable. You cannot use S3 bucket of Deep Glacier class for web hosting.
24Gel 👍 2
this should not be a concern here. You cannot create a deep archive bucket, when you create a bucket, you either create a normal bucket or a single zone bucket, then you can configure it to use deep archive in it.
Jay_2pt0_1 👍 2
I think I'll go for A when I take the exam, but, like most people, I'm on the fence.
ninomfr64 👍 2 Selected: D
In the exam I would go for D, but both A and D have an issue: you do not need to enable static website hosting on the bucket, as this is only for public website endpoints. However, having static website hosting enabled doesn't prevent you from access the bucket using API. See https://aws.amazon.com/blogs/networking-and-content-delivery/hosting-internal-https-static-websites-with-alb-s3-and-privatelink/#:~:text=You%20do%20not%20need%20to%20enable%20static%20website%20hosting%20on%20the%20bucket%2C%20as%20this%20is%20only%20for%20public%20website%20endpoints.%20Requests%20to%20the%20bucket%20will%20be%20going%20through%20a%20private%20REST%20API%20instead.
924641e 👍 1
Tricky but answer D would provide the LOWEST cost vs answer A. Answer A would be the best design balance between cost and use for end-users.
ixdb 👍 1 Selected: D
S3 bucket does not support to set a default storage class. You can create lifecycle rule with Day 0 to move to Glactier deep archive class and enable web hosting. You can do it on aws console.
geekos 👍 1 Selected: D
If the company needs to access these documents occasionally and can tolerate several hours of retrieval time, Option D (Glacier Deep Archive) would be the most cost-effective solution. However, if the company requires faster access to these documents (even if infrequently), Option A (S3 One Zone-IA) would be a better choice, balancing cost with the need for more immediate access. Since the original statement indicates that "availability and speed of retrieval are not concerns," Option D (Glacier Deep Archive) aligns more closely with these stipulations, offering the lowest cost solution at the expense of longer retrieval times. However, if the retrieval time becomes a concern at any point, switching to S3 One Zone-IA (Option A) could provide a middle ground between cost and accessibility.
Hit1979 👍 1 Selected: A
S3 Glacier Deep Archive storage is primarily intended for data archiving purposes. However, it's important to note that in many organizations, only backup administrators have access to retrieve data, and it's not typically designed for direct user access. Additionally, using Deep Archive for web hosting is not feasible due to its intended use case, which focuses on long-term data retention rather than immediate or user-initiated access
edder 👍 1 Selected: D
The answer is D. B,C: No need to use EC2. A: There is no need to use IA as it states that availability and speed of retrieval are not concerns of the company. D: If necessary, you can restore the object to an S3 bucket and retrieve it with web hosting. https://docs.aws.amazon.com/AmazonS3/latest/userguide/restoring-objects.html
jainparag1 👍 1 Selected: A
B and C are distractors. Between A and D, A satisfies all the requirements and since data is available physically somewhere else and so it can be stored in One-zone IA storage class. D would have been the best option cost wise if the bucket is not used for website hosting. Since Glacier class can't be used for website hosting it eliminates option D. Right answer is A.
epartida 👍 1 Selected: D
D because the Consulting times is Low, that means the files will not be checked frequently.
srs27 👍 1
In such divide in correct answer, what should be picked and remembered for exam?
severlight 👍 1 Selected: A
I would answer A instead of D for the reason that some copies are already stored somewhere and we don't need durability across AZs, and there is retrieval cost of the archive. However, this makes me doubt 'The speed of retrieval are not concern'.
senthilsekaran 👍 3
Will go with Option D as it has clearly mentioned company want to move archived documents
Pupu86 👍 1
D: as Glacier deep archival is the lowest cost A: one-zone IA only cost 20% cheaper. both can work with retrieval of data without concern on speed but D will be the cheapest no matter what.
rlf 👍 2
A. if it were D, retrieval cost from web would become higher than A. And also in Glacier we call vault not bucket.
jainparag1 👍 1
Retrieval is very rare and time is not a concern. I'll go for D. One zone IA is not for storing archived documents.
career360guru 👍 3
Option A is the only cost effective solution. Deep Archive can't be used for Web-Hosting. Anyone who thinks that is possible should try it once before selecting that option.
ninomfr64 👍 2
You can create an S3 bucket and configure a lifecycle policy to move any files after 0 days to Glacier Deep Archive, then you enable static web site hosting (I just did it) Here the point is that static web site hosting is only for public endpoint, thus in this scenario going for A or D you would only access documents using S3 api.
dkcloudguru 👍 1
Option D: This option involves creating an Amazon S3 bucket and configuring it to use the S3 Glacier Deep Archive storage class as default. This storage class is designed for long-term storage of data that is rarely accessed and can be restored within several hours, offering the lowest cost storage for different access patterns. The S3 bucket is configured for website hosting and an S3 interface endpoint is created
whenthan 👍 2 Selected: A
large documents storage - s3 and availability and speed of retrieval are no concerns and lowest cost...
Simon523 👍 2 Selected: D
I think the key words are "Availability and speed of retrieval are not concerns" & "LOWEST cost". Of course user cannot directly access the file, for it require 12 hours to retrieval files, but cause the time is not concern, so I select "D".
b3llman 👍 1
A - Glacier Deep Archive will take too long and it will hit the request timeout limit for S3.
chico2023 👍 1 Selected: A
This is so tricky, but I would also go with A. The only reason I go with A is that answer D has "Configure the S3 bucket for website hosting". This part doesn't make sense (unless they were storing other types of static content) as objects archived in Glacier DA have to be restored first. Seriously. If it wasn't that, I would go D.
ninomfr64 👍 1
Correct, but enabling static web site doesn't prevent you to access objects via S3 api (scenario doesn't require uses to access content via web site) Also, B requires to run an EC2 that is making B and C more expensive than A and D
MRL110 👍 2
Since there is cost associated with One Zone-IA retrieval as well as interface endpoints, this should be B considering EFS One Zone-IA is cheaper than EBS SC1.
Greyeye 👍 1
us-east-1 EFS - One Zone-Infrequent Access Storage (GB-Month) $0.0133 EBS sc1 - $0.015 per GB-month of provisioned storage that pricing is very close...
MRL110 👍 1
Also, website access is not possible with interface-endpoints. (https://repost.aws/questions/QUu19UpXsTRnaPcg5biU54RA/s3-interface-endpoint)
Russs99 👍 1 Selected: A
As to D, S3 Glacier Deep Archive storage should not be used as the default storage for any daily usage. It is designed for long-term archiving of data that is rarely accessed. The default retrieval time for S3 Glacier Deep Archive items is 12 hours, which is too slow for most daily usage.
khksoma 👍 1
It is A. https://tutorialsdojo.com/amazon-s3-vs-glacier/
Magoose 👍 1 Selected: D
i dont see anything saying you cant use web hosting with Deep archive. I believe the web hosting is seperate from the storage class.
hirenshah005 👍 1
You are wrong Sir, Deep Archive can not make public objects even they are in Intranet
Mom305 👍 2 Selected: D
About enabling Website hosting in a S3 Bucket, remember that retrieving objects from Glacier Deep Archive will temporarily make the objects available into a Standard S3 bucket (which you can enable with Website hosting) https://docs.aws.amazon.com/AmazonS3/latest/userguide/restoring-objects.html
NikkyDicky 👍 1 Selected: A
A D is not usable
dkx 👍 2
S3 can be used to host static web content, while Glacier cannot. In S3, users create buckets. In Glacier, users create archives and vaults. https://tutorialsdojo.com/amazon-s3-vs-glacier/
Jonalb 👍 1 Selected: D
DDDDDDDDDDDDDD sorry guys
Jonalb 👍 1 Selected: A
The number of requests will be low!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! AAAAAAAAAAAAAAAAAAAAAAA
Maria2023 👍 5 Selected: A
I vote for A, mostly based on that sentence "Create an Amazon S3 bucket. Configure the S3 bucket to use the S3 Glacier Deep Archive storage class as default" - I do not believe you can configure S3 bucket to use Glacier Deep Archive storage class as default. You need to set up lifecycle rules to transfer data to glacier. Plus the "website hosting" part
Jackhemo 👍 1 Selected: A
based on olabiba.ai: ased on the requirements and the need for the lowest cost solution, the most suitable option would be: A. Create an Amazon S3 bucket. Configure the S3 bucket to use the S3 One Zone-Infrequent Access (S3 One Zone-IA) storage class as default. Configure the S3 bucket for website hosting. Create an S3 interface endpoint. Configure the S3 bucket to allow access only through that endpoint. This option allows you to store the archived documents in an S3 bucket with the One Zone-Infrequent Access storage class, which is cost-effective for long-term storage. By configuring the S3 bucket for website hosting, you can make the documents accessible through the corporate intranet. Creating an S3 interface endpoint ensures secure access through the VPC, and by configuring the S3 bucket to allow access only through that endpoint, you ensure that the data is not accessible to the public.
tromyunpak 👍 2
S3 Glacier Deep Archive is a cost-effective and easy-to-manage alternative to tape. S3 Glacier Deep Archive delivers the lowest cost storage, up to 75% lower cost (than S3 Glacier Flexible Retrieval), for long-lived archive data that is accessed less than ONCE per year and is retrieved asynchronously. so Answer is A
easytoo 👍 2
a-a-a-a-a-a-a-a-a-a-a-a-a
Jesuisleon 👍 1 Selected: A
I think A makes sense than D. Don't think s3 glacier deep tier is suitable for web hosting.
emiliocb4 👍 1 Selected: D
lower cost and no concerning on retrieval time
rtguru 👍 1
The correct answer is D
SkyZeroZx 👍 1 Selected: D
D LOWEST Cost for me
gonzjo52 👍 1
Nunca se menciono un sitio web, se dijo "intranet" a través de la VPN, por lo que no es necesario una web estaticas en el bucket. Elijo la opción D
karma4moksha 👍 2
Option D: Create an Amazon S3 bucket. Configure the S3 bucket to use the S3 Glacier Deep Archive storage class as default. Configure the S3 bucket for website hosting. Create an S3 interface endpoint. Configure the S3 bucket to allow access only through that endpoint. This option would be less expensive than using other S3 storage classes, but it would still be more expensive than using S3 One Zone-IA storage. Additionally, using the S3 Glacier Deep Archive storage class would make retrieval of the documents slow and expensive, which does not meet the company's requirements. Therefore, this option is not the best fit for the company's requirements.Hence A
AWS_Sam 👍 2
No doubt that the answer is D Glacier Deep Archive storage. Frontend access is not the main point of the question.
gameoflove 👍 1 Selected: D
D is the correct option as A is One Zone-Infrequent Access (S3 One Zone-IA) storage class which is not HA
Maja1 👍 5 Selected: A
Glacier can't handle web hosting. It's a trick question.
devopsy 👍 1
if the question says archiving, most of the time the answer is glacier
OnePunchExam 👍 8 Selected: D
When tackling AWS questions, always note the key requirement which is the LOWEST cost. It even says number of requests is low, availability and speed are not of concern. Also don't make assumptions of the methods retrieval, it can always be a frontend to trigger restore and then once restore is complete, notify user to download. Frontend is not the main point of the question, here we want to provide solution for storage archival at CHEAPEST cost.
Asagumo 👍 1 Selected: D
Within a single bucket, the object for website hosting is not necessarily a Glacier Deep Archive storage class. Since the purpose is to store archived documents, you can assume long-term storage.
dev112233xx 👍 3 Selected: A
A makes more sense than D.. Deep Archive retrieval time is 12 hours and I’m not sure it’s possible to host static website in such long retrieval time!
vherman 👍 1 Selected: A
A is the only correct. I looked up the AWS docs... S3 Glacier Deep Archive is a completely separate service that does not support web hosting.
Dimidrol 👍 8
A , i created bucket with web hosting and put some html pages in glacier deep archive and had 403 error, operation invalid for object storage class
Damijo 👍 1
D - S3 One Zone-IA is for data that is accessed less frequently, but requires rapid access when needed. Question says availability and speed of retrieval are not concerns of the company.
vherman 👍 1 Selected: D
Availability and speed of retrieval are not concerns of the company. but they did not mention high durability which is not provided by OneZone-IA
limjieson 👍 1
D is c orrect
kiran15789 👍 5 Selected: A
will go with A considering following hints 1) data is copy of somethign stored else where (hints to One zone) 2) traffic is low (but it still exist) 3) minimum storage duration D might alos be correct but i will select A in exam
Sarutobi 👍 1
Exactly, lol.
cudbyanc 👍 2 Selected: D
This solution provides cost-effective storage for the archived documents using the S3 One Zone-Infrequent Access (S3 One Zone-IA) storage class, which is the lowest cost storage option for infrequently accessed data in a single availability zone. Hosting the S3 bucket as a website enables easy access to the documents through the intranet, and creating an S3 interface endpoint ensures that access is only possible through the VPN attached to the VPC. Additionally, S3 provides built-in security features, such as bucket policies and access control lists (ACLs), to control access to the data.
Sarutobi 👍 4 Selected: A
I will use A, but the question does not specify how often the files are retrieved. If they are retrieved frequently A for sure if they aren't then D.
Ajani 👍 3
https://www.linkedin.com/pulse/s3-standard-more-cost-effective-than-glacier-jon-bonso; Definitely A: Glacier has the highest minimum storage duration, which is 180 days, it becomes cost prohibitive if you factor in retrieval costs
God_Is_Love 👍 1
Tricky one - Glacier storage class has different levels which can fetch documents quickly with instant retrieval too. so many people go for A but answer is D to save more!. - https://aws.amazon.com/s3/storage-classes/glacier/
c73bf38 👍 2
I'm on the fence on this question, Option A is offering a Single AZ S3 bucket with infrequent access that has the feature to enable web hosting. I can't find a web hosting feature with any of the archive classes unless the archive is restored and transitioned back to the standard class.
PSPaul 👍 1
D is good! Keyword is "speed of retrieval are not concerns" So, Glacier Deep Archive is the choice.
saurabh1805 👍 1 Selected: D
Lowest cost gives the hint. it should be option D.
kiran15789 👍 1 Selected: D
The employees can connect via intranet point to note is it's not via web application, so ppl can wait 12hours to get the documents for the lowest storage cost
c73bf38 👍 1
Confused by why everyone thinks it's D, reading the doc it says the use case and the minimum archive period is 90 days. https://docs.aws.amazon.com/AmazonS3/latest/userguide/restoring-objects.html Number of days you plan to keep objects archived – S3 Glacier Flexible Retrieval and S3 Glacier Deep Archive are long-term archival solutions. The minimal storage duration period is 90 days for the S3 Glacier Flexible Retrieval storage class and 180 days for S3 Glacier Deep Archive. Deleting data that is archived to Amazon S3 Glacier doesn't incur charges if the objects you delete are archived for more than the minimal storage duration period. If you delete or overwrite an archived object within the minimal duration period, Amazon S3 charges a prorated early deletion fee. For information about the early deletion fee, see the
brfc 👍 3
I was going for D but due to retrieval costs I'm now leaning towards A
Sara_swa 👍 1
B - since 'The data must not be accessible to the public' and EFS one zone IA is cheaper than EBS sc1
oatif 👍 1 Selected: A
D does not make any sense 12-48 hours of data retrieval time is absurd - hence A.
DWsk 👍 1
I'm really unsure on this one. I can't find a definitive answer whether you can use glacier to host web content. It would make sense you can't because you need to restore the data before retrieving it, but theoretically it could be possible with application logic. This question feels like its a gotcha that is using Glacier as a red herring for CHEAPEST option but really wants you to use One Zone IA.
anita_student 👍 2
You can't use Glacier (in any flavor) for website hosting
cloudman 👍 2
Read this : The number of requests will be low. Availability and speed of retrieval are not concerns of the company & LOWEST COST I see its D
Shahul75 👍 2 Selected: C
It should C. taking of the wrong ones, S3 interface doesn't support website endpoints EFS One Zone-IA is expensive than SC1 Only one is left, which is "C"
bititan 👍 4 Selected: A
web hosting not possible with deep archive objects. so I go for option A. Question is not about archival solution. it's about accessing data from vpc based application whilst maintaining lowest
masetromain 👍 1 Selected: D
The S3 Glacier Deep Archive storage class is the lowest-cost storage class offered by Amazon S3, and it is designed for archival data that is accessed infrequently and for which retrieval time of several hours is acceptable. S3 interface endpoint for the VPC ensures that access to the bucket is only from resources within the VPC and this will meet the requirement of not being accessible to the public. And also, S3 bucket can be configured for website hosting, and this will allow employees to access the documents through the corporate intranet. Using an EC2 instance and a file system or block store would be more expensive and unnecessary because the number of requests to the data will be low and availability and speed of retrieval are not concerns. Additionally, using Amazon S3 bucket will provide durability, scalability and availability of data.
sferenc 👍 2
Answer A. You cannot host a website from glacier: Glacier needs an other bucket to restore the requested objects, and a lifetime. You cannot achieve this with the static s3 hosting (initiate restore). Yes, it will be the cheapest solution, but does not work.
tman22 👍 47
A - Glacier Deep Archive can't be used for web hosting, regardless if the company says retrieval time is no concern.
tman22 👍 18
Nevermind, I go for D. It should be technically possible - and mostly dependent on the intranet web application logic - It could present users with the ability to start file retrieval, for then to later access the data.
bjct 👍 1
Yes we can use one bucket with different storage class to store objects as per s3 lifecycle policy.
masetromain 👍 4 Selected: D
The number of requests will be low. Availability and speed of retrieval are not concerns of the company. Which solution will meet these requirements at the LOWEST cost? I go with D
zhangyu20000 👍 2
one bucket with deep glacier by default, can this bucket use web hosting?
zhangyu20000 👍 23
A is correct. HA is not required here. D use Glacier deep archive that need hours to access that will cause time out for web

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Option A is the best fit because S3 One Zone-IA is designed for infrequently accessed, re-creatable data that does not need multi-AZ resilience. The scenario explicitly says the documents are copies of data held on physical media elsewhere, requests are low, and availability/speed are not concerns, so paying for Standard or multi-AZ storage is unnecessary. S3 also avoids running and patching an EC2 web server plus EFS/EBS, and the interface endpoint gives private access from the VPC-attached client VPN without exposing the bucket publicly. Although the website-hosting wording is technically awkward with an interface endpoint, A still uses the correct low-cost storage class and private S3 access pattern.

Why the Other Options Are Wrong

Option B uses EFS One Zone-IA, which is far more expensive per GB than S3 One Zone-IA and requires an EC2 server, so it cannot be lowest cost. Option C uses EBS sc1 on a single EC2 instance; sc1 is cheap per GB but still needs an EC2 server, is limited by volume size, and does not provide S3's durable object-storage model. Option D uses Glacier Deep Archive, whose per-GB price is lower, but objects must be restored before they can be read; S3 website hosting cannot serve an unrestored Deep Archive object, and a restore/notification workflow would add complexity and retrieval costs. The exam's "lowest cost" means the lowest total solution that actually makes documents available, not the cheapest storage line item.

Community Comment Notes

Learners split mainly between A and D. tman22 initially noted that "Glacier Deep Archive can't be used for web hosting," while also considering D if the intranet triggers restores; a54b16f argued that using Glacier would require a separate restore application, saying you "Need to develop a whole new application" to request unarchiving. Maria2023 and Dimidrol reinforced A from the website-hosting angle, with Dimidrol reporting an actual "operation invalid for object storage class" error when serving archived objects. OnePunchExam's D-leaning point is fair that the frontend could handle restores, but the question gives no such workflow, so A is the safer exam answer for immediate, private, low-cost access.

Official Reference

Exam Strategy

When an SAP-C02 question says "lowest cost," compare total cost, not just storage price: Glacier Deep Archive adds restore latency and retrieval fees. Also separate archive storage from the serving path: if users must browse documents through an intranet, the storage class must allow on-demand reads or include a restore workflow.

Frequently Asked Questions

Why is S3 Glacier Deep Archive not the lowest-cost answer here?

Its per-GB storage is cheaper, but restoring archived objects takes hours and adds retrieval/request costs; without a restore workflow the intranet cannot serve them directly.

Why does S3 One Zone-IA fit data copied from physical media?

Because the archive is a secondary copy, losing one Availability Zone does not lose the only copy, and One Zone-IA costs less than Standard-IA.

More SAP-C02 FAQ →

Related Analysis

Practice All SAP-C02 Questions

Access 85 questions with complete answers and detailed explanations.

View Full SAP-C02 Practice Test →

← Back to SAP-C02 Study Guide