[Solved] Given this AWS IAM policy snippet, what does it allow?{ "Effect": "Allow", "Action": "s3:ListBucket", "Resource": "arn:aws:s3:::example-bucket" } | AWS

AWS - Account and Billing

Given this AWS IAM policy snippet, what does it allow?

{
  "Effect": "Allow",
  "Action": "s3:ListBucket",
  "Resource": "arn:aws:s3:::example-bucket"
}

AAllows listing objects inside example-bucket

BAllows listing the example-bucket itself

CAllows listing all buckets in the account

DAllows deleting example-bucket

Step-by-Step Solution

Solution:

Step 1: Understand the Action and Resource
The action 's3:ListBucket' allows listing the bucket itself, which includes metadata and the ability to list objects inside.
Step 2: Differentiate from other permissions
This permission allows listing the bucket (its contents), but not listing all buckets (which requires s3:ListAllMyBuckets) or deleting.
Final Answer:
Allows listing the example-bucket itself -> Option B
Quick Check:
s3:ListBucket on bucket ARN = list bucket contents [OK]

Quick Trick: s3:ListBucket on bucket = list bucket contents [OK]

Common Mistakes:

Master "Account and Billing" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

Given this AWS IAM policy snippet, what does it allow?