Refer to the exhibit. A security administrator is reviewing an S3 bucket policy. What is the primary security concern with this policy?
Exhibit
Refer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:PutObject",
"s3:DeleteObject"
],
"Resource": "arn:aws:s3:::example-bucket/*",
"Condition": {
"IpAddress": {
"aws:SourceIp": "203.0.113.0/24"
}
}
}
]
}
```Trap 1: The policy does not enforce server-side encryption
Encryption is not specified in this policy.
Trap 2: The bucket is publicly accessible from any IP
Access is restricted to a specific IP range.
Trap 3: The policy does not require MFA for delete operations
MFA delete is a separate bucket setting, not part of this policy.
- A
The policy allows delete access from a trusted IP range without additional controls
Delete access should be restricted further or require MFA.
- B
The policy does not enforce server-side encryption
Why wrong: Encryption is not specified in this policy.
- C
The bucket is publicly accessible from any IP
Why wrong: Access is restricted to a specific IP range.
- D
The policy does not require MFA for delete operations
Why wrong: MFA delete is a separate bucket setting, not part of this policy.