A SysOps Administrator Implemented the Following Bucket Policy to Allow

question 578

Multiple Choice

A SysOps Administrator implemented the following bucket policy to allow only the corporate IP address range of 54.240.143.0/24 to access objects in an Amazon S3 bucket. Some employees are reporting that they are able to access the S3 bucket from IP addresses outside the corporate IP address range. How can the Administrator address this issue?

• A) Modify the Condition operator to include both NotIpAddress and IpAddress to prevent unauthorized access to the S3 bucket. Modify the Condition operator to include both NotIpAddress and IpAddress to prevent unauthorized access to the S3 bucket.
• B) Modify the Condition element from the IAM policy to aws:StringEquals instead of aws:SourceIp . element from the IAM policy to aws:StringEquals instead of aws:SourceIp .
• C) Modify the IAM policy instead of the bucket policy to restrict users from accessing the bucket based on their source IP addresses.
• D) Change Effect from Allow to Deny in the second statement of the policy to deny requests not from the source IP range. Change Effect from Allow to Deny in the second statement of the policy to deny requests not from the source IP range.

---

Definitions:

Equality

The condition in which everyone has the same status, rights, and chances.

Political Efficacy

An individual's belief in their ability to influence political processes or their confidence in the political system to address their concerns.

Trust in Government

Trust in Government reflects the public's confidence and belief in the competency, fairness, and integrity of government operations and actions.

Trust in Government

The level of confidence the public holds in their government's ability to act competently, fairly, and in the public's interest.