SAP-C02 · Question #864
A company uses Microsoft Active Directory for user management and Microsoft Entra ID as an identity provider (IdP). The company uses an organization in AWS Organizations to manage multiple AWS…
The correct answer is C. Create an S3 access point for each of the S3 buckets. Block public access in the S3 access point. S3 Access Points allow you to manage fine-grained access to shared S3 buckets without creating overly large bucket policies. You can attach access point policies that define permissions for specific user groups, significantly reducing operational overhead. Users can access the…
Question
A company uses Microsoft Active Directory for user management and Microsoft Entra ID as an identity provider (IdP). The company uses an organization in AWS Organizations to manage multiple AWS accounts. The company establishes an AWS IAM Identity Center instance that is integrated with the IdP and creates the required user groups. Multiple company departments and applications use Amazon S3. The company uses S3 bucket policies to manage permissions. As a result of the granular permissions the company creates, the policies grow so large that they reach the quota for S3 bucket policy length. The company needs to simplify the process of managing granular S3 bucket permissions for company identities. Which solution will meet this requirement with the LEAST operational overhead?
Options
- ACreate an S3 Access Grant. Associate the S3 Access Grant with the IAM Identity Center instance.
- BCreate an S3 access point for each of the S3 buckets. Create an AWS Lambda function to query
- CCreate an S3 access point for each of the S3 buckets. Block public access in the S3 access point
- DGroup users into appropriate OUs in Organizations. Create SCPs to grant access to specific S3
How the community answered
(53 responses)- A6% (3)
- B19% (10)
- C66% (35)
- D9% (5)
Explanation
S3 Access Points allow you to manage fine-grained access to shared S3 buckets without creating overly large bucket policies. You can attach access point policies that define permissions for specific user groups, significantly reducing operational overhead. Users can access the S3 buckets through the access points, simplifying management while retaining granular access
Community Discussion
No community discussion yet for this question.