A company has an application that stores data in an Amazon S3 bucket. In the same AWS account, the company deploys a new data analysis application on Amazon EC2 with an instance profile attached. The analysis application is able to get a list of S3 objects but is unable to read the data. The following IAM policy is attached to the instance role: Which solution will give the analysis application the ability to read the data in the S3 bucket?

Topic #: - All AWS Certified Security - Specialty Questions

A. Add the s3:GetObjectVersion action to the list of actions in the policy that is attached to the instance role.
B. Add the following IAM policy to the instance role:
Most Voted
C. Create a bucket policy for the data bucket. Add the following statement to the bucket policy:
D. Update the application to write objects with the bucket-owner-full-control ACL.

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Suggested Answer:

Share this post

Join the Discussion