An AWS account has two S3 buckets: bucket1 and bucket2. bucket2 does not have a bucket policy. bucket1 has a specific bucket policy. The same account has an IAM user named alice with a specific IAM policy. Which buckets can alice access?
Choose an answer
Tap an option to check your answer.
Correct answer: Both bucket1 and bucket2.
Why this is the answer
In AWS, access to S3 buckets is determined by evaluating both the IAM policy attached to the user (Alice) and the bucket policy attached to the bucket. If either policy grants permission, access is allowed, unless an explicit deny is present in either policy. Since the question states Alice has a "specific IAM policy" and does not mention any explicit denies, we assume her IAM policy grants her access to S3. bucket2 has no bucket policy, so access is solely determined by Alice's IAM policy. bucket1 has a "specific bucket policy," which, in the absence of an explicit deny, would also allow access if Alice's IAM policy grants it. Therefore, Alice can access both buckets.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed