A Systems Administrator has written the following Amazon S3 bucket policy designed to allow access to an S3 bucket for only an authorized AWS IAM user from the IP address range 10.10.10.0/24:
When trying to download an object from the S3 bucket from 10.10.10.40, the IAM user receives an access denied message. What does the Administrator need to change to grant access to the user?

Question

A Systems Administrator has written the following Amazon S3 bucket policy designed to allow access to an S3 bucket for only an authorized AWS IAM user from the IP address range 10.10.10.0/24:

When trying to download an object from the S3 bucket from 10.10.10.40, the IAM user receives an access denied message. What does the Administrator need to change to grant access to the user?

Albert Tedjadiputra · Accepted Answer

Change the “Resource” from “arn: aws:s3:::Bucket” to “arn:aws:s3:::Bucket/*”.

Albert Tedjadiputra · Answer

Change the “Principal” from “*” to {AWS:”arn:aws:iam: : account-number: user/username”}

Albert Tedjadiputra · Answer

Change the “Version” from “2012-10-17” to the last revised date of the policy

Albert Tedjadiputra · Answer

Change the “Action” from [“s3:*”] to [“s3:GetObject”, “s3:ListBucket”]

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 188 - SCS-C01 discussion

Suggested answer: A

0 comments