[Solved] Given this IAM policy snippet attached to a user:{"Effect": "Allow", "Action": ["s3:ListBucket"], "Resource": ["arn:aws:s3:::my-bucket"]}What will the user be able to do? | AWS

AWS - Identity and Access Management

Given this IAM policy snippet attached to a user:

{"Effect": "Allow", "Action": ["s3:ListBucket"], "Resource": ["arn:aws:s3:::my-bucket"]}

What will the user be able to do?

AList the objects inside 'my-bucket'

BUpload objects to 'my-bucket'

CList the bucket itself but not its objects

DDelete objects from 'my-bucket'

Step-by-Step Solution

Solution:

Step 1: Understand s3:ListBucket action
This action allows listing the bucket's contents (keys), but not object-level actions.
Step 2: Check resource scope
The resource is the bucket ARN without /*, so it applies to the bucket, not objects.
Final Answer:
List the objects inside 'my-bucket' -> Option A
Quick Check:
s3:ListBucket lists objects = A [OK]

Quick Trick: s3:ListBucket lists bucket keys, not object data [OK]

Common Mistakes:

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

Given this IAM policy snippet attached to a user: