Refer to the exhibit. An administrator needs to review the IAM role being provisioned for Cloud Data Sense in order to scan S3 buckets. Which two permissions are missing? (Choose two.)

Question

Options

• As3:DeleteObject
• Bs3:Put0bjectAcl
• Cs3:List*
• Ds3:GetObjectAcl
• Es3:Get*

• A
  10% (5)
• B
  2% (1)
• C
  82% (42)
• D
  6% (3)

Explanation

For Cloud Data Sense to effectively scan S3 buckets, it requires permissions to list and get objects within the buckets. From the IAM policy provided in the exhibit, the permissions currently s3:PutObject for object creation and a series of IAM-related permissions such as iam:GetPolicyVersion, iam:GetPolicy, and iam:ListAttachedRolePolicies. However, for scanning purposes, Data Sense needs to read and list the objects in the buckets. Therefore, the missing permissions are: s3:List*: This permission allows the listing of all objects within the S3 buckets, which is necessary to scan and index the contents. s3:Get*: This grants the ability to retrieve or read the content of the objects within the S3 buckets, which is essential for scanning the data within them. These permissions ensure that Cloud Data Sense can access the metadata and contents of objects within S3 to perform its functionality.

No community discussion yet for this question.