[Solved] Why does this bucket policy fail to grant access?{ "Effect": "Allow", "Principal": {"AWS": "arn:aws:iam::123456789012:user/Alice"}, "Action": "s3:ListBucket", "Resource": "arn:aws:s3:::mybucket/*" } | AWS

AWS - S3 Fundamentals

Why does this bucket policy fail to grant access?

{
  "Effect": "Allow",
  "Principal": {"AWS": "arn:aws:iam::123456789012:user/Alice"},
  "Action": "s3:ListBucket",
  "Resource": "arn:aws:s3:::mybucket/*"
}

AResource ARN is incorrect for ListBucket action

BPrincipal format is invalid

CAction "s3:ListBucket" does not exist

DEffect should be "Deny" to grant access

Step-by-Step Solution

Solution:

Step 1: Understand ListBucket action resource requirements
ListBucket requires bucket ARN without /*, only bucket itself.
Step 2: Check Resource ARN in policy
Resource includes /* which is for objects, so policy fails.
Final Answer:
Resource ARN is incorrect for ListBucket action -> Option A
Quick Check:
ListBucket needs bucket ARN without /* = B [OK]

Quick Trick: ListBucket uses bucket ARN without /* in Resource [OK]

Common Mistakes:

Using object ARN for ListBucket
Misformatting Principal
Confusing Allow and Deny effects

Master "S3 Fundamentals" in AWS

9 interactive learning modes - each teaches the same concept differently

Learn Why Deep Visual Try Challenge Project Recall Time

More AWS Quizzes

Why does this bucket policy fail to grant access?

Step 1: Understand ListBucket action resource requirements

Step 2: Check Resource ARN in policy

Final Answer:

Quick Check:

Want More Practice?