A company wants to find Amazon S3 buckets that are shared with other AWS accounts. Which AWS feature or service will help identify cross-account S3 sharing?
Choose an answer
Tap an option to check your answer.
Correct answer: IAM Access Analyzer.
Why this is the answer
IAM Access Analyzer helps identify resources in your organization and accounts, such as Amazon S3 buckets or IAM roles, that are shared with an external entity. It uses logic reasoning to analyze access policies and identify unintended access. AWS Lake Formation is a service for building, securing, and managing data lakes. An IAM credential report lists all users in an account and the status of their various credentials, but not resource sharing. Amazon CloudWatch is a monitoring and observability service that collects monitoring and operational data in the form of logs, metrics, and events, but does not analyze resource access policies.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed