[Solved] Given this policy snippet:{"Effect": "Allow", "Action": "s3:GetObject", "Resource": "arn:aws:s3:::example-bucket/*"}What will happen if a user tries to delete an object in example-bucket? | AWS

AWS - Identity and Access Management

Given this policy snippet:

{"Effect": "Allow", "Action": "s3:GetObject", "Resource": "arn:aws:s3:::example-bucket/*"}

What will happen if a user tries to delete an object in example-bucket?

AThe delete action is allowed

BThe delete action is denied

CThe delete action is allowed only if explicitly allowed elsewhere

DThe delete action is allowed by default

Step-by-Step Solution

Solution:

Step 1: Analyze allowed actions in policy
Only s3:GetObject is allowed, no delete permission.
Step 2: Understand default deny behavior
Delete action is not allowed explicitly, so it is denied by default.
Final Answer:
Delete action is denied -> Option B
Quick Check:
Unallowed action = Denied [OK]

Quick Trick: Only explicitly allowed actions are permitted; others denied [OK]

Common Mistakes:

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

Given this policy snippet: