- Home
- All questions
- Question 144
AWS Certified Solutions Architect study material · question 144 of 500
Which two signs indicate an S3 bucket policy may expose data publicly? Choose two.
Show the answer
Answer: A. A Principal element set to a wildcard
B. An Action element set to a wildcard
A wildcard principal effectively means anyone, and a wildcard action permits any operation. Conditions and narrow resources restrict rather than expose.
Source: Security best practices for Amazon S3 (Amazon Web Services) — Ensure buckets are not publicly accessible