Which is true regarding access to data in multiple namespaces?

Question

Options

• AThe system administrator can access objects on any namespace.
• BDifferent authentication providers can authenticate the object user for the different namespaces.
• CThe namespace administrator can give a traditional object user access to multiple namespaces.
• DOnly an S3 IAM user can be given access to multiple namespaces.

• A
  4% (1)
• B
  4% (1)
• C
  12% (3)
• D
  80% (20)

Explanation

In object storage systems that support multi-tenancy via namespaces, S3 IAM users are the only user type designed with policy-based, cross-namespace access capabilities - their credentials can be scoped with IAM policies that reference resources across multiple namespaces, making D correct.

Why the distractors are wrong:

• A is false because system administrators are bound by administrative domains; even they are typically scoped to specific namespace management and cannot freely access any namespace's object data.
• B is false because authentication providers operate at the system level - they don't selectively authenticate the same user differently per namespace.
• C is false because namespace administrators can only manage access within their own namespace; they lack the authority to grant cross-namespace permissions to traditional object users.

Memory tip: Think of it as a hierarchy of trust - traditional object users and namespace admins are "namespace-locked," while S3 IAM users carry portable, policy-driven credentials that can cross namespace boundaries. If a question asks who can span namespaces, think IAM = "I Access Multiple."

No community discussion yet for this question.