Exam AWS Certified Security - Specialty topic 1 question 495 discussion

Exam question from Amazon's AWS Certified Security - Specialty

Question #: 495
Topic #: 1

[All AWS Certified Security - Specialty Questions]

A company wants to deny a specific federated user named Bob access to an Amazon S3 bucket named DOC-EXAMPLE-BUCKET. The company wants to meet this requirement by using a bucket policy. The company also needs to ensure that this bucket policy affects Bob's S3 permissions only. Any other permissions that Bob has must remain intact.

Which policy should the company use to meet these requirements?

Show Suggested Answer

Suggested Answer: B 🗳️

by Mark1000 at June 3, 2023, 4:09 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

yorkicurke

1 year, 3 months ago

Selected Answer: B

Eliminating the rest; Option A: This policy allows all S3 actions for the federated user Bob on the DOC-EXAMPLE-BUCKET. Option C: The question specifies a federated user, not an IAM user. Therefore, this policy would not affect the intended user. Option D: Same as above, this option does not specify a federated user, it is asking for an assumed role. Therefore, this policy would not affect the intended user.

upvoted 1 times

...

danielklein09

1 year, 10 months ago

Selected Answer: B

Deny + federated user Bob

upvoted 3 times

...

Mark1000

1 year, 10 months ago

B Example bottom page: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_getfederationtoken.html

upvoted 2 times

...

Exam AWS Certified Security - Specialty All Questions

View all questions & answers for the AWS Certified Security - Specialty exam

Exam AWS Certified Security - Specialty topic 1 question 495 discussion

Comments

yorkicurke

danielklein09

Mark1000

SY0-701