SCS-C02 · Question #197
A company wants to deny a specific federated user named Bob access to an Amazon S3 bucket named DOC-EXAMPLE-BUCKET. The company wants to meet this requirement by using a bucket policy. The company als
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #197. The question stem and answer options stay visible for context.
Question
A company wants to deny a specific federated user named Bob access to an Amazon S3 bucket named DOC-EXAMPLE-BUCKET. The company wants to meet this requirement by using a bucket policy. The company also needs to ensure that this bucket policy affects Bob's S3 permissions only. Any other permissions that Bob has must remain intact. Which policy should the company use to meet these requirements? A. B. C. D.
Exhibits
Options
- A{ "Version": "2012-10-17", "Statement": [ { "Principal": { "AWS": "arn:aws:sts::account-id:federated-user/Bob" }, "Effect": "Allow", "Action": "s3:*", "Resource": "arn:aws:s3:::DOC-EXAMPLE-BUCKET" } ] }
- B{ "Version": "2012-10-17", "Statement": [ { "Principal": { "AWS": "arn:aws:sts::account-id:federated-user/Bob" }, "Effect": "Deny", "Action": "s3:*", "Resource": "arn:aws:s3:::DOC-EXAMPLE-BUCKET" } ] }
- C{ "Version": "2012-10-17", "Statement": [ { "Principal": { "AWS": "arn:aws:iam::account-id:user/Bob" }, "Effect": "Deny", "Action": "s3:*", "Resource": "arn:aws:s3:::DOC-EXAMPLE-BUCKET" } ] }
- D{ "Version": "2012-10-17", "Statement": [ { "Principal": { "AWS": "arn:aws:sts::account-id:assumed-role/Bob" }, "Effect": "Deny", "Action": "s3:*", "Resource": "arn:aws:s3:::DOC-EXAMPLE-BUCKET" } ] }
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.