A data engineer is configuring access to a data lake in Amazon S3. What does the JSON policy shown allow?
Exhibit
Refer to the exhibit.
```
{
"policy": {
"Statement": [
{
"Effect": "Allow",
"Action": ["s3:GetObject"],
"Resource": "arn:aws:s3:::data-bucket/*"
}
]
}
}
```Trap 1: Change user permissions
The policy is a resource-based policy, not about user permissions.
Trap 2: Delete objects from the bucket
DeleteObject is not included.
Trap 3: Write objects to the bucket
The action is GetObject, not PutObject.
- A
Change user permissions
Why wrong: The policy is a resource-based policy, not about user permissions.
- B
Read objects from the bucket
GetObject allows reading.
- C
Delete objects from the bucket
Why wrong: DeleteObject is not included.
- D
Write objects to the bucket
Why wrong: The action is GetObject, not PutObject.