Study. uk . com
  1. Home
  2. All questions
  3. Question 2

AWS Certified Solutions Architect study material · question 2 of 500

A team must let an application in account A read an S3 bucket in account B. What is the minimum policy configuration required?

  1. Only an identity-based policy in account A
  2. A service control policy applied to both accounts
  3. A bucket policy in account B naming the principal, plus an identity-based policy in account A
  4. Only a bucket policy in account B naming the principal
Show the answer

Answer: C. A bucket policy in account B naming the principal, plus an identity-based policy in account A

Cross-account access needs both halves: the resource policy naming the outside principal and a policy in that principal's own account permitting the call.

Source: Policies and permissions in AWS Identity and Access Managem… (Amazon Web Services) — Resource-based policies

Challenge yourself on this topic → Study as cards