What will happen if a bucket policy explicitly allows s3:PutObject for a user but the IAM user policy denies it?

medium📝 Predict Output Q5 of 15

AWS - S3 Fundamentals

AThe user will be allowed to put objects because bucket policy allows it

BThe user will be denied only if the bucket policy also denies it

CThe user will be denied because IAM policy denies it

DThe user will be allowed only if the bucket is public

Step-by-Step Solution

Solution:

Step 1: Understand policy evaluation order
Explicit Deny in any policy overrides Allow in others.
Step 2: Apply to IAM and bucket policies
IAM user policy denies s3:PutObject, so user is denied despite bucket policy Allow.
Final Answer:
The user will be denied because IAM policy denies it -> Option C
Quick Check:
Explicit Deny anywhere overrides Allow = D [OK]

Quick Trick: Explicit Deny in IAM or bucket policy always blocks access [OK]

Common Mistakes:

Master "S3 Fundamentals" in AWS

9 interactive learning modes - each teaches the same concept differently

Want More Practice?

15+ quiz questions · All difficulty levels · Free

More AWS Quizzes