Bird
0
0

What is the result of this IAM policy statement?

medium📝 service behavior Q5 of 15
AWS - Identity and Access Management
What is the result of this IAM policy statement?
{"Effect": "Allow", "Action": ["s3:GetObject", "s3:PutObject"], "Resource": "arn:aws:s3:::mybucket/*"}
AAllows only getting objects in 'mybucket'
BAllows getting and putting objects in the 'mybucket' bucket
CDenies all actions on 'mybucket'
DAllows all actions on all buckets
Step-by-Step Solution
Solution:
  1. Step 1: Analyze the "Effect" and "Action" keys

    The "Effect" is "Allow" and "Action" includes both "s3:GetObject" and "s3:PutObject".
  2. Step 2: Understand the "Resource" specification

    The resource is the 'mybucket' bucket and all its objects (indicated by /*).
  3. Final Answer:

    Allows getting and putting objects in 'mybucket' -> Option B
  4. Quick Check:

    Allow + multiple actions + specific bucket = Allows getting and putting objects in the 'mybucket' bucket [OK]
Quick Trick: Multiple actions in array allow all listed actions [OK]
Common Mistakes:
MISTAKES
  • Assuming only first action applies
  • Confusing Allow with Deny
  • Ignoring the resource ARN format

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes