Exam AWS Certified Security - Specialty SCS-C02 topic 1 question 98 discussion

Exam question from Amazon's AWS Certified Security - Specialty SCS-C02

Question #: 98
Topic #: 1

[All AWS Certified Security - Specialty SCS-C02 Questions]

A security engineer is troubleshooting an AWS Lambda function that is named MyLambdaFunction. The function is encountering an error when the function attempts to read the objects in an Amazon S3 bucket that is named DOC-EXAMPLE-BUCKET. The S3 bucket has the following bucket policy:

Which change should the security engineer make to the policy to ensure that the Lambda function can read the bucket objects?

A. Remove the Condition element. Change the Principal element to the following:
B. Change the Action element to the following:
C. Change the Resource element to "arn:aws:s3:::DOC-EXAMPLE- BUCKET/*''.
D. Change the Resource element to "arn:aws:lambda:::function:MyLambdaFunction". Change the Principal element to the following:

Show Suggested Answer

Suggested Answer: C 🗳️

by [deleted] at Nov. 25, 2023, 11:20 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.