exam questions

Exam AWS Certified Security - Specialty All Questions

View all questions & answers for the AWS Certified Security - Specialty exam

Exam AWS Certified Security - Specialty topic 1 question 423 discussion

Exam question from Amazon's AWS Certified Security - Specialty
Question #: 423
Topic #: 1
[All AWS Certified Security - Specialty Questions]

Company A has an AWS account that is named Account A. Company A recently acquired Company B, which has an AWS account that is named Account B. Company B stores its files in an Amazon S3 bucket. The administrators need to give a user from Account A full access to the S3 bucket in Account B.

After the administrators adjust the IAM permissions for the user in Account A to access the S3 bucket in Account B, the user still cannot access any files in the S3 bucket.

Which solution will resolve this issue?

  • A. In Account B, create a bucket ACL to allow the user from Account A to access the S3 bucket in Account B.
  • B. In Account B, create an object ACL to allow the user from Account A to access all the objects in the S3 bucket in Account B.
  • C. In Account B, create a bucket policy to allow the user from Account A to access the S3 bucket in Account B.
  • D. In Account B, create a user policy to allow the user from Account A to access the S3 bucket in Account B.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
tainh
Highly Voted 2 years, 5 months ago
Selected Answer: C
C is correct Cross-account access to S3 https://aws.amazon.com/premiumsupport/knowledge-center/cross-account-access-s3/
upvoted 6 times
...
Dinesh6242
Most Recent 1 year ago
C is correct because bucket policy is used for cross account access.
upvoted 1 times
...
G4Exams
2 years ago
Selected Answer: C
C. Bucket Policy is still needed in the bucket.
upvoted 1 times
...
kerar
2 years, 5 months ago
Selected Answer: C
AWS recommends using S3 bucket policies or IAM policies for access control. https://aws.amazon.com/blogs/security/iam-policies-and-bucket-policies-and-acls-oh-my-controlling-access-to-s3-resources/
upvoted 4 times
...
AdamWest
2 years, 5 months ago
Selected Answer: C
C - Bucket policies are Deny by default.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago