Configuration Panel PBQs: AWS Certified CloudOps Engineer – Associate (SOA-C03)

Your company stores sensitive customer data in an S3 bucket named 'prod-customer-data'. A recent security audit found several misconfigurations: versioning is suspended, server-side encryption uses only SSE-S3 instead of SSE-KMS with a customer-managed key, the bucket key feature is disabled, and Block Public Access is not fully enabled. Configure the bucket properties to meet the compliance requirements specified in the objectives.