[Solved] Given this IAM policy statement snippet:{ "Effect": "Allow", "Action": "s3:ListBucket", "Resource": "arn:aws:s3:::example-bucket" }What permission does this statement grant? | AWS

AWS - Identity and Access Management

Given this IAM policy statement snippet:

{
  "Effect": "Allow",
  "Action": "s3:ListBucket",
  "Resource": "arn:aws:s3:::example-bucket"
}

What permission does this statement grant?

AAllows listing the bucket itself

BAllows listing objects inside the bucket

CAllows deleting the bucket

DAllows uploading objects to the bucket

Step-by-Step Solution

Solution:

Step 1: Understand the Action "s3:ListBucket"
This action allows listing the bucket itself and its metadata, not the objects inside.
Step 2: Match Resource and Action
The resource is the bucket ARN, so permission is to list the bucket (its properties), not the objects inside the bucket.
Final Answer:
Allows listing the bucket itself -> Option A
Quick Check:
s3:ListBucket = list bucket (not objects) [OK]

Quick Trick: s3:ListBucket lists the bucket, not objects inside [OK]

Common Mistakes:

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

Given this IAM policy statement snippet: