Examlex

Solved

A Company's Security Engineer Is Copying All Application Logs to Centralized

question 264

Multiple Choice

A company's Security Engineer is copying all application logs to centralized Amazon S3 buckets. Currently, each of the company's application is in its own AWS account, and logs are pushed into S3 buckets associated with each account. The Engineer will deploy an AWS Lambda function into each account that copies the relevant log files to the centralized S3 bucket. The Security Engineer is unable to access the log files in the centralized S3 bucket. The Engineer's IAM user policy from the centralized account looks like this: A company's Security Engineer is copying all application logs to centralized Amazon S3 buckets. Currently, each of the company's application is in its own AWS account, and logs are pushed into S3 buckets associated with each account. The Engineer will deploy an AWS Lambda function into each account that copies the relevant log files to the centralized S3 bucket. The Security Engineer is unable to access the log files in the centralized S3 bucket. The Engineer's IAM user policy from the centralized account looks like this:   The centralized S3 bucket policy looks like this:   Why is the Security Engineer unable to access the log files? A)  The S3 bucket policy does not explicitly allow the Security Engineer access to the objects in the bucket. B)  The object ACLs are not being updated to allow the users within the centralized account to access the objects. C)  The Security Engineer's IAM policy does not grant permissions to read objects in the S3 bucket. D)  The s3:PutObject and s3:PutObjectAcl permissions should be applied at the S3 bucket level. The centralized S3 bucket policy looks like this: A company's Security Engineer is copying all application logs to centralized Amazon S3 buckets. Currently, each of the company's application is in its own AWS account, and logs are pushed into S3 buckets associated with each account. The Engineer will deploy an AWS Lambda function into each account that copies the relevant log files to the centralized S3 bucket. The Security Engineer is unable to access the log files in the centralized S3 bucket. The Engineer's IAM user policy from the centralized account looks like this:   The centralized S3 bucket policy looks like this:   Why is the Security Engineer unable to access the log files? A)  The S3 bucket policy does not explicitly allow the Security Engineer access to the objects in the bucket. B)  The object ACLs are not being updated to allow the users within the centralized account to access the objects. C)  The Security Engineer's IAM policy does not grant permissions to read objects in the S3 bucket. D)  The s3:PutObject and s3:PutObjectAcl permissions should be applied at the S3 bucket level. Why is the Security Engineer unable to access the log files?


Definitions:

Team Success

The achievement of desired results or objectives by a group working collaboratively, often measured by project completion, efficiency, or cohesion.

Synergy

The creation of a whole greater than the sum of its individual parts.

Collective Action

The action taken by a group of people working together towards a common goal, often to achieve a social or political outcome.

Extraordinary Results

Outcomes that surpass common expectations or standards, often through exceptional effort, innovation, or effectiveness.

Related Questions