AWS - Identity and Access Management
Which IAM policy snippet follows the least privilege principle for allowing S3 read-only access to a specific bucket
my-bucket?Which IAM policy snippet follows the least privilege principle for allowing S3 read-only access to a specific bucket my-bucket?
easy📝 Configuration Q12 of 15
Step-by-Step Solution
Solution:
Step 1: Identify required permissions for read-only S3 access
Read-only means allowing onlys3:GetObjecton the specific bucket's objects.Step 2: Match policy actions and resources
{\"Effect\": \"Allow\", \"Action\": [\"s3:GetObject\"], \"Resource\": \"arn:aws:s3:::my-bucket/*\"} allows onlys3:GetObjectonmy-bucketobjects, following least privilege.Final Answer:
Policy allowing only s3:GetObject on my-bucket objects -> Option CQuick Check:
Least privilege = specific action + resource [OK]
Quick Trick: Allow only needed actions on specific resources [OK]
Common Mistakes:
- Using wildcard * for all actions or resources
- Allowing delete or write actions unnecessarily
- Granting permissions for unrelated services
Master "Identity and Access Management" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes