
Explanation:
Statement 1 allows ListBucket on the bucket itself. Statement 2 allows GetObject and PutObject on objects inside it. Together they grant list + read + write on finance-reports.
Ultimate access to all questions.
IAM Policy Question 1
Review the following IAM policy. What actions will the attached user be able to perform?
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:ListBucket",
"Resource": "arn:aws:s3:::finance-reports"
},
{
"Effect": "Allow",
"Action": ["s3:GetObject", "s3:PutObject"],
"Resource": "arn:aws:s3:::finance-reports/*"
}
]
}
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:ListBucket",
"Resource": "arn:aws:s3:::finance-reports"
},
{
"Effect": "Allow",
"Action": ["s3:GetObject", "s3:PutObject"],
"Resource": "arn:aws:s3:::finance-reports/*"
}
]
}
A
List bucket contents, read and write objects in finance-reports
B
Full S3 access to all buckets
C
Only read objects from finance-reports
D
Create and delete S3 buckets
No comments yet.