Study. uk . com
  1. Home
  2. All questions
  3. Question 108

AWS Certified Solutions Architect study material · question 108 of 500

Which two conditions must hold before disabling ACLs on an existing S3 bucket? Choose two.

  1. The bucket policy covers every intended grant outside the account
  2. The bucket ACL has been reset to give the owner full control
  3. Versioning has been enabled on the bucket
  4. The bucket has been emptied of all objects
Show the answer

Answer: A. The bucket policy covers every intended grant outside the account
B. The bucket ACL has been reset to give the owner full control

Once ACLs are off, only policies grant access, so the bucket policy must already cover external grants and the ACL must be back at its default.

Source: Security best practices for Amazon S3 (Amazon Web Services) — Disable access control lists (ACLs)

Challenge yourself on this topic → Study as cards