[Solved] Given the following IAM group policy attached to group Admins: { "Version": "2012-10-17", "Statement": [{ "Effect": "Allow", "Action": "s3:*", "Resource":... | AWS

AWS - Identity and Access Management

Given the following IAM group policy attached to group Admins:

{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Allow",
    "Action": "s3:*",
    "Resource": "*"
  }]
}

If user bob is added to the Admins group, what permissions does bob have on S3?

AFull access to all S3 actions and resources

BRead-only access to S3 buckets

CNo access to S3 unless user policy allows it

DAccess only to S3 buckets created by bob

Step-by-Step Solution

Solution:

Step 1: Analyze the group policy permissions
The policy allows all S3 actions (s3:*) on all resources (*), meaning full access.
Step 2: Understand group membership effect
User bob inherits all permissions from the Admins group.
Final Answer:
Full access to all S3 actions and resources -> Option A
Quick Check:
Group policy allows s3:* on * = full access [OK]

Quick Trick: s3:* on * means full S3 access [OK]

Common Mistakes:

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

Given the following IAM group policy attached to group Admins: