Bird
0
0

Given this bucket policy snippet, what does it allow?

medium📝 Predict Output Q13 of 15
AWS - S3 Fundamentals
Given this bucket policy snippet, what does it allow?
{
  "Effect": "Allow",
  "Principal": "*",
  "Action": "s3:GetObject",
  "Resource": "arn:aws:s3:::example-bucket/*"
}
AAllows anyone to upload files to the bucket
BAllows only the bucket owner to delete objects
CDenies all access to the bucket
DAllows anyone to read objects from the bucket
Step-by-Step Solution
Solution:
  1. Step 1: Analyze the Effect and Principal

    Effect is "Allow" and Principal is "*" meaning everyone is allowed.
  2. Step 2: Check the Action and Resource

    Action is "s3:GetObject" which means read access to objects in the bucket "example-bucket".
  3. Final Answer:

    Allows anyone to read objects from the bucket -> Option D
  4. Quick Check:

    Allow + * + GetObject = public read [OK]
Quick Trick: Effect Allow + Principal * + GetObject = public read [OK]
Common Mistakes:
MISTAKES
  • Thinking GetObject allows uploads
  • Confusing Allow with Deny
  • Ignoring the wildcard * in Principal

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes