A Company Is Using AWS Organizations to Manage Multiple AWS

question 65

Multiple Choice

A company is using AWS Organizations to manage multiple AWS accounts. The company has an application that allows users to assume the AppUser IAM role to download files from an Amazon S3 bucket that is encrypted with an AWS KMS CMK. However, when users try to access the files in the S3 bucket, they get an access denied error. What should a security engineer do to troubleshoot this error? (Choose three.)

• A) Ensure the KMS policy allows the AppUser role to have permission to decrypt for the CMK.
• B) Ensure the S3 bucket policy allows the AppUser role to have permission to get objects for the S3 bucket.
• C) Ensure the CMK was created before the S3 bucket.
• D) Ensure the S3 block public access feature is enabled for the S3 bucket.
• E) Ensure that automatic key rotation is disabled for the CMK.
• F) Ensure the SCPs within Organizations allow access to the S3 bucket.

---

Definitions:

Facebook

A social networking site that allows users to connect with friends, share photos, links, and videos, and participate in various online communities.

Internet

A vast network of computers connected globally, facilitating communication, information exchange, and various services.

Projective Tests

A type of personality test in which the individual offers responses to ambiguous scenes, words, or images, revealing hidden emotions and internal conflicts.

Low Reliability

A term used in statistics and psychometrics indicating that a test or measurement tool does not consistently produce the same results under the same conditions.