[Solved] Given this bucket policy snippet, what is the effect?{ "Effect": "Deny", "Principal": "*", "Action": "s3:DeleteObject", "Resource": "arn:aws:s3:::mybucket/*" } | AWS

AWS - S3 Fundamentals

Given this bucket policy snippet, what is the effect?

{
  "Effect": "Deny",
  "Principal": "*",
  "Action": "s3:DeleteObject",
  "Resource": "arn:aws:s3:::mybucket/*"
}

AOnly the bucket owner can delete objects

BEveryone is denied permission to delete objects in the bucket

CEveryone is allowed to delete objects in the bucket

DNo effect because the policy is incomplete

Step-by-Step Solution

Solution:

Step 1: Analyze the Effect and Principal
Effect is "Deny" and Principal is "*" meaning everyone is denied.
Step 2: Understand the Action and Resource
Action is "s3:DeleteObject" on all objects in the bucket, so delete is denied for all.
Final Answer:
Everyone is denied permission to delete objects in the bucket -> Option B
Quick Check:
Deny + Principal * + DeleteObject = Deny all deletes [OK]

Quick Trick: "Deny" always overrides other permissions for specified actions [OK]

Common Mistakes:

Master "S3 Fundamentals" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

Given this bucket policy snippet, what is the effect?