Study. uk . com
  1. Home
  2. All questions
  3. Question 29

AWS Certified Solutions Architect study material · question 29 of 500

With ACLs disabled on a bucket, a client uploads an object specifying a custom grant to another AWS account. What does S3 return?

  1. HTTP 403 with the error code AccessDenied
  2. HTTP 200, with the grant silently ignored
  3. HTTP 409 with the error code BucketAlreadyOwnedByYou
  4. HTTP 400 with the error code AccessControlListNotSupported
Show the answer

Answer: D. HTTP 400 with the error code AccessControlListNotSupported

Once ACLs are disabled a bucket accepts only uploads with no ACL or bucket-owner-full-control; anything else fails with 400 AccessControlListNotSupported.

Source: Security best practices for Amazon S3 (Amazon Web Services) — Disable access control lists (ACLs)

Challenge yourself on this topic → Study as cards