nerdexam
Amazon

DVA-C02 · Question #25

A developer has written the following IAM policy to provide access to an Amazon S3 bucket: Which access does the policy allow regarding the s3:GetObject and s3:PutObject actions?

The correct answer is D. Access on all objects in the "DOC-EXAMPLE-BUCKET" bucket except on objects that start with. https://aws.amazon.com/blogs/security/iam-policies-and-bucket-policies-and-acls-oh-my- controlling-access-to-s3-resources/

Submitted by ravi_2018· Mar 5, 2026Security

Question

A developer has written the following IAM policy to provide access to an Amazon S3 bucket:

Which access does the policy allow regarding the s3:GetObject and s3:PutObject actions?

Options

  • AAccess on all buckets except the "DOC-EXAMPLE-BUCKET" bucket
  • BAccess on all buckets that start with "DOC-EXAMPLE-BUCKET" except the "DOC-EXAMPLE-
  • CAccess on all objects in the "DOC-EXAMPLE-BUCKET" bucket along with access to all S3
  • DAccess on all objects in the "DOC-EXAMPLE-BUCKET" bucket except on objects that start with

How the community answered

(46 responses)
  • A
    7% (3)
  • B
    9% (4)
  • C
    17% (8)
  • D
    67% (31)

Explanation

https://aws.amazon.com/blogs/security/iam-policies-and-bucket-policies-and-acls-oh-my- controlling-access-to-s3-resources/

Community Discussion

No community discussion yet for this question.

Full DVA-C02 Practice