Question

Which of the following IAM policies provides read-only access to the S3 bucket mybucket and its content?

a) "Action": "s3:PutObject"
b) "Action": "s3:GetObject"
c) "Action": "s3:DeleteObject"
d) "Action": "s3:ListBucket"

Answer 1

Option b) "Action": "s3:GetObject" provides read-only access as it allows retrieving objects from a bucket. However, full read-only access to a bucket and its contents usually requires both s3:GetObject and s3:ListBucket actions in the policy.

Step-by-step explanation:

To determine which Identity and Access Management (IAM) policy provides read-only access to the S3 bucket mybucket and its content, let's examine the actions specified in the options:

• s3:PutObject - Grants permissions to upload objects to a bucket. This action is for write access, not read-only access.
• s3:GetObject - Grants permissions to retrieve objects from a bucket. This is a read-level permission that enables downloading or viewing objects.
• s3:DeleteObject - Grants permissions to delete objects from a bucket. This action is not related to read-only access as it allows for modification by deletion.
• s3:ListBucket - Grants permissions to list the contents of a bucket. This is a read-level permission, but it does not allow for viewing or downloading the objects themselves, only listing them.

Option b) "Action": "s3:GetObject" provides the functionality to retrieve objects which aligns with read-only access requirements. To provide read-only access to both the objects and the listing of the bucket, you would typically use a combination of s3:GetObject and s3:ListBucket actions in your IAM policy.