Exam AWS Certified SysOps Administrator - Associate topic 1 question 166 discussion

B. Per AWS: https://repost.aws/knowledge-center/s3-static-website-endpoint-error "If an Access Denied error is returned by the web browser or cURL command, then the object isn't publicly accessible. To allow public read access to your S3 object, create a bucket policy that allows public read access for all objects in the bucket." I'm not sure why everyone here is trying to provide answers without actual references. How you think in your head is irrelevant if it's not correct with AWS documentation.

Ans B Ref: https://aws.amazon.com/es/premiumsupport/knowledge-center/s3-static-website-endpoint-error/

Answer: B

The answer is B, here is a sample bucket policy { "Version": "2012-10-12", "Statement": { "Sid": "PublicReadGetObject", "Effect": "Allow", "Action": [ "s3:GetObject" ], "Principal": "*", "Resouce": [ "arn:aws:s3:::example-s3-website.com/*" ] } }

It can't be A because Amazon doesn't have "Block Public Access Policy" feature, it has "Block Public Access Settings" - The key difference is Policy vs. Settings. Therefore A is confusing to many. Once you clear the "Block Public Access" SETTINGS you then ADD A BUCKET POLICY that makes your bucket content publicly available.

This will allow anyone to access the objects in the bucket and view the static website. Option A, "Add a bucket policy that grants everyone read access to the bucket," grants read access to the bucket itself, but not necessarily to its objects.

Reading objects, not just reading from the bucket, is the key to static website hosting. Nobody browses to the bucket, but instead the files themselves.

Answer is B.

A. Add a bucket policy that grants everyone read access to the bucket. To fix the error message "403 Forbidden - Access Denied" when trying to access a static website hosted on Amazon S3, you should add a bucket policy that grants everyone read access to the bucket. By default, Amazon S3 bucket policies deny all public access to the bucket and its contents. To allow users to access the static website hosted on the bucket, you need to add a bucket policy that grants read access to the bucket. You can do this by specifying a bucket policy that includes a "Principal" element with the value "*" (wildcard), which grants access to everyone, and an "Action" element with the value "s3:GetObject", which allows users to retrieve objects from the bucket. Option B, adding a bucket policy that grants everyone read access to the bucket objects, would not be a valid solution, as this would not grant read access to the bucket itself.

bbbbbb