nerdexam
Amazon

SCS-C02 · Question #347

A company hosts data in S3. There is a requirement to control access to the S3 buckets. Which are the 2 ways in which this can be achieved?

The correct answer is A. Use Bucket policies C. Use IAM user policies. The AWS Documentation mentions the following Amazon S3 offers access policy options broadly categorized as resource-based policies and user policies. Access policies you attach to your resources (buckets and objects) are referred to as resource-based policies. For example…

Submitted by chiamaka_o· Mar 6, 2026Identity and Access Management

Question

A company hosts data in S3. There is a requirement to control access to the S3 buckets. Which are the 2 ways in which this can be achieved?

Options

  • AUse Bucket policies
  • BUse the Secure Token service
  • CUse IAM user policies
  • DUse AWS Access Keys

How the community answered

(17 responses)
  • A
    71% (12)
  • B
    18% (3)
  • D
    12% (2)

Explanation

The AWS Documentation mentions the following Amazon S3 offers access policy options broadly categorized as resource-based policies and user policies. Access policies you attach to your resources (buckets and objects) are referred to as resource-based policies. For example, bucket policies and access control lists (ACLs) are resource-based policies. You can also attach access policies to users in your account. These are called user policies. You may choose to use resource-based policies, user policies, or some combination of these to manage permissions to your Amazon S3 resources. Option B and D are invalid because these cannot be used to control access to S3 buckets https://docs.aws.amazon.com/AmazonS3/latest/dev/s3-access-control.html

Topics

#S3 bucket policies#IAM user policies#S3 access control

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice