A SysOps Administrator Is Writing a Utility That Publishes Resources

question 583

Multiple Choice

A SysOps Administrator is writing a utility that publishes resources from an AWS Lambda function in AWS Account A to an Amazon S3 bucket in AWS Account B. The Lambda function is able to successfully write new objects to the S3 bucket, but IAM users in Account B are unable to delete objects written to the bucket by Account A. Which step will fix this issue?

• A) Add s3:DeleteObject permission to the IAM execution role of the AWS Lambda function in Account A. Add s3:DeleteObject permission to the IAM execution role of the AWS Lambda function in Account A.
• B) Change the bucket policy of the S3 bucket in Account B to allow s3:DeleteObject permission for Account A. Change the bucket policy of the S3 bucket in Account B to allow permission for Account A.
• C) Disable server-side encryption for objects written to the S3 bucket by the Lambda function.
• D) Call the S3:PutObjectAcl API operation from the Lambda function in Account A to specify bucket owner, full control. Call the S3:PutObjectAcl API operation from the Lambda function in Account A to specify bucket owner, full control.

---

Definitions:

Online Network

A digital platform or system where individuals or entities are connected through the internet to share information, communicate, or collaborate.

Library Content

The collection of resources and materials available in a library, including books, journals, digital media, and other informational content.

WorldCat

A global catalog of library collections, allowing users to search for books, music, videos, and other material available in libraries worldwide.

Wikis

Collaborative websites where users can add, modify, or delete content directly through a web browser.