Study. uk . com
  1. Home
  2. All questions
  3. Question 144

AWS Certified Solutions Architect study material · question 144 of 500

Which two signs indicate an S3 bucket policy may expose data publicly? Choose two.

  1. A Principal element set to a wildcard
  2. An Action element set to a wildcard
  3. A Condition element using aws:SourceVpce
  4. A Resource element naming a single object key
Show the answer

Answer: A. A Principal element set to a wildcard
B. An Action element set to a wildcard

A wildcard principal effectively means anyone, and a wildcard action permits any operation. Conditions and narrow resources restrict rather than expose.

Source: Security best practices for Amazon S3 (Amazon Web Services) — Ensure buckets are not publicly accessible

Challenge yourself on this topic → Study as cards