ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 424 - SAA-C03 discussion

Report
Export

A group requires permissions to list an Amazon S3 bucket and delete objects from that bucket An administrator has created the following IAM policy to provide access to the bucket and applied that policy to the group. The group is not able to delete objects in the bucket. The company follows least-privilege access rules.

A)

B)

C)

A.
Option A
Answers
A.
Option A
B.
Option B
Answers
B.
Option B
C.
Option C
Answers
C.
Option C
D.
Option D
Answers
D.
Option D
Suggested answer: D

Explanation:

{

'Version': '2012-10-17',

'Statement': [

{

'Action': [

's3:ListBucket',

's3:DeleteObject'

],

'Resource': [

'arn:aws:s3:::<bucket-name>'

],

'Effect': 'Allow',

},

{

'Action': 's3:*DeleteObject',

'Resource': [

'arn:aws:s3:::<bucket-name>/*' # <- The policy clause kludge 'added' to match the solution (Q248.1) example

],

'Effect': 'Allow'

}

]

}

asked 16/09/2024
Peter Kiraly
34 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first