ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS-SysOps All Questions

View all questions & answers for the AWS-SysOps exam
Go to Exam

Exam AWS-SysOps topic 1 question 659 discussion

Exam question from Amazon's AWS-SysOps
Question #: 659
Topic #: 1
[All AWS-SysOps Questions]

A SysOps Administrator is writing an AWS Lambda function in AWS Account A to put objects in an Amazon S3 bucket in AWS Account B. The Lambda function is able to successfully write new objects to the S3 bucket, but IAM users in Account B are unable to delete objects written to the bucket by Account A.
Which step will fix this issue?

  • A. Add s3:DeleteObject permission to the IAM execution role of the AWS Lambda function in Account A.
  • B. Change the bucket policy of the S3 bucket in Account B to allow s3:DeleteObject permission for Account A.
  • C. Disable server-side encryption for objects written to the S3 bucket by the Lambda function.
  • D. Modify the Lambda function to call the S3:PutObjectAcl API operation to specify bucket owner, full control.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by BearNear at July 2, 2021, 8:10 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
asfsdfsdf
8 months, 3 weeks ago
Selected Answer: D
D is correct - see wahlbergusa's comment
upvoted 1 times
...
wahlbergusa
1 year ago
Should be "D" . => https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html , "The bucket owner will own the object if the object is uploaded with the bucket-owner-full-control canned ACL. Without this setting and canned ACL, the object is uploaded and remains owned by the uploading account"
upvoted 4 times
...
BearNear
1 year ago
B. Change the bucket policy of the S3 bucket in Account B to allow s3:DeleteObject permission for Account A. I am not sure, but it looks like the closest match.
upvoted 2 times
BearNear
1 year ago
I was wrong, after going through the link that wahlbergusa has, it clear now that the answer is D.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago