Which of the following can allow you to define the permissions for the external accounts?

You have several S3 buckets defined in your AWS account. You need to give access to external AWS accounts to these S3 buckets.

Which of the following can allow you to define the permissions for the external accounts? Choose 2 answers from the options given below
A . IAM policies
B . Buckets ACL’s
C . IAM users
D . Bucket policies

View Answer

Answer: B,D

Explanation:

The AWS Security whitepaper gives the type of access control and to what level the control can be given

Options A and C are incorrect since for external access to buckets, you need to use either Bucket policies or Bucket ACL’s or more information on Security for storage services role please refer to the below URL:

https://d1.awsstatic.com/whitepapers/Security/Security Storage Services Whitepaper.pdf

The correct answers are: Buckets ACL’s, Bucket policies

Submit your Feedback/Queries to our Experts