[Solved] Given this IAM policy snippet, what is the effective permission granted? { "Effect": "Allow", "Action": ["s3:PutObject", "s3:GetObject"], "Resource": "arn:aws:s3:::example-bucket/*" } | AWS

AWS - Identity and Access Management

Given this IAM policy snippet, what is the effective permission granted?

{
  "Effect": "Allow",
  "Action": ["s3:PutObject", "s3:GetObject"],
  "Resource": "arn:aws:s3:::example-bucket/*"
}

ADenies all access to example-bucket

BAllows uploading and downloading objects only in example-bucket

CAllows full access to all S3 buckets

DAllows deleting objects in example-bucket

Step-by-Step Solution

Solution:

Step 1: Analyze actions in the policy
The policy allows s3:PutObject (upload) and s3:GetObject (download) actions.
Step 2: Check resource scope
The resource is limited to objects inside example-bucket, so permissions apply only there.
Final Answer:
Allows uploading and downloading objects only in example-bucket -> Option B
Quick Check:
Actions + resource = upload/download in example-bucket [OK]

Quick Trick: Check actions and resource ARN carefully [OK]

Common Mistakes:

MISTAKES

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

Given this IAM policy snippet, what is the effective permission granted?