ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 58 - NS0-304 discussion

Report
Export

Refer to the exhibit.

An administrator needs to review the IAM role being provisioned for Cloud Data Sense in order to scan S3 buckets. Which two permissions are missing? (Choose two.)

A.
s3:DeleteObject
Answers
A.
s3:DeleteObject
B.
s3:Put0bjectAcl
Answers
B.
s3:Put0bjectAcl
C.
s3:List*
Answers
C.
s3:List*
D.
s3:GetObjectAcl
Answers
D.
s3:GetObjectAcl
E.
s3:Get*
Answers
E.
s3:Get*
Suggested answer: C, E

Explanation:

For Cloud Data Sense to effectively scan S3 buckets, it requires permissions to list and get objects within the buckets. From the IAM policy provided in the exhibit, the permissions currently include s3:PutObject for object creation and a series of IAM-related permissions such as iam:GetPolicyVersion, iam:GetPolicy, and iam:ListAttachedRolePolicies. However, for scanning purposes, Data Sense needs to read and list the objects in the buckets. Therefore, the missing permissions are:

s3:List*: This permission allows the listing of all objects within the S3 buckets, which is necessary to scan and index the contents.

s3:Get*: This grants the ability to retrieve or read the content of the objects within the S3 buckets, which is essential for scanning the data within them.

These permissions ensure that Cloud Data Sense can access the metadata and contents of objects within S3 to perform its functionality.

asked 23/09/2024
Sterling White
47 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first