A digital marketing company has multiple AWS accounts that belong to various teams. The creative team uses an Amazon S3 bucket in its AWS account to securely store images and media files that are used as content for the company's marketing campaigns. The creative team wants to share the S3 bucket with the strategy team so that the strategy team can view the objects. A solutions architect has created an IAM role that is named strategy_reviewer in the Strategy account. The solutions architect also has set up a custom AWS Key Management Service (AWS KMS) key in the Creative account and has associated the key with the S3 bucket. However, when users from the Strategy account assume the IAM role and try to access objects in the S3 bucket, they receive an Account. The solutions architect must ensure that users in the Strategy account can access the S3 bucket. The solution must provide these users with only the minimum permissions that they need. Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)

Question

Accepted Answer

A. Create a bucket policy that includes read permissions for the S3 bucket. C. Update the custom KMS key policy in the Creative account to grant decrypt permissions to the F. Update the strategy_reviewer IAM role to grant read permissions for the S3 bucket and to grant

Answer

B. Update the strategy_reviewer IAM role to grant full permissions for the S3 bucket and to grant

Answer

D. Create a bucket policy that includes read permissions for the S3 bucket.

Answer

E. Update the custom KMS key policy in the Creative account to grant encrypt permissions to the

A digital marketing company has multiple AWS accounts that belong to various teams. The creative team uses an Amazon S3 bucket in its AWS account to securely store images and media files that are…

Question

Options

How the community answered

Explanation

Community Discussion