An Amazon S3 Bucket Is Encrypted Using an AWS KMS

question 215

Multiple Choice

An Amazon S3 bucket is encrypted using an AWS KMS CMK. An IAM user is unable to download objects from the S3 bucket using the AWS Management Console; however, other users can download objects from the S3 bucket. Which policies should the Security Engineer review and modify to resolve this issue? (Choose three.)

• A) The CMK policy
• B) The VPC endpoint policy
• C) The S3 bucket policy
• D) The S3 ACL
• E) The IAM policy

---

Definitions:

Capital Expenditures

Capital invested by a business to purchase or improve tangible assets, like real estate, factories, or machinery.

Stockholders' Equity

Represents the owners' claims on the assets of a corporation, calculated as total assets minus total liabilities.

Residual Value

The projected amount an asset is expected to yield when sold at the conclusion of its useful life.

Double-Declining-Balance

An accelerated method of depreciation where an asset’s book value is reduced at double the rate of its straight-line depreciation.