Exam AWS Certified Security - Specialty topic 1 question 89 discussion

Exam question from Amazon's AWS Certified Security - Specialty

Question #: 89
Topic #: 1

[All AWS Certified Security - Specialty Questions]

An AWS account includes two S3 buckets: bucket1 and bucket2. The bucket2 does not have a policy defined, but bucket1 has the following bucket policy:

In addition, the same account has an IAM User named `alice`, with the following IAM policy.

Which buckets can user `alice` access?

A. Bucket1 only
B. Bucket2 only
C. Both bucket1 and bucket2
D. Neither bucket1 nor bucket2

Show Suggested Answer

Suggested Answer: C 🗳️

by jackn at Dec. 28, 2021, 8 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

CarisB

Highly Voted 3 years, 4 months ago

C https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html When an IAM entity (user or role) requests access to a resource within the same account, AWS evaluates all the permissions granted by the identity-based and resource-based policies. The resulting permissions are the total permissions of the two types. If an action is allowed by an identity-based policy, a resource-based policy, or both, then AWS allows the action. An explicit deny in either of these policies overrides the allow.

upvoted 21 times

...