{"id":194,"date":"2021-01-10T10:29:52","date_gmt":"2021-01-10T10:27:26","guid":{"rendered":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/aws-certified-security-specialty-scs-c01-question185\/"},"modified":"2021-01-10T10:30:35","modified_gmt":"2021-01-10T10:30:35","slug":"aws-certified-security-specialty-scs-c01-question185","status":"publish","type":"post","link":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/aws-certified-security-specialty-scs-c01-question185\/","title":{"rendered":"AWS Certified Security &#8211; Specialty SCS-C01 &#8211; Question185"},"content":{"rendered":"<div class=\"question\">A company\u2019s Security Engineer is copying all application logs to centralized Amazon S3 buckets. Currently, each of the company\u2019s application is in its own AWS account, and logs are pushed into S3 buckets associated with each account. The Engineer will deploy an AWS Lambda function into each account that copies the relevant log files to the centralized S3 bucket.<br \/>\nThe Security Engineer is unable to access the log files in the centralized S3 bucket. The Engineer\u2019s IAM user policy from the centralized account looks like this:<br \/>\n<img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-full\" src=\"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-content\/uploads\/exam\/__Page_74_Image_0001.jpg\" \/><br \/>\nThe centralized S3 bucket policy looks like this:<br \/>\n<img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-full\" src=\"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-content\/uploads\/exam\/__Page_74_Image_0002.jpg\" \/><br \/>\nWhy is the Security Engineer unable to access the log files? <br \/><strong><br \/>A.<\/strong> The S3 bucket policy does not explicitly allow the Security Engineer access to the objects in the bucket. <br \/><strong>B.<\/strong> The object ACLs are not being updated to allow the users within the centralized account to access the objects. <br \/><strong>C.<\/strong> The Security Engineer\u2019s IAM policy does not grant permissions to read objects in the S3 bucket. <br \/><strong>D.<\/strong> The s3:PutObject and s3:PutObjectAcl permissions should be applied at the S3 bucket level.<\/div>\n<p><\/p>\n<style> .hidden-div{ display:none } <\/style>\n<p>\t\t\t\t\t\t\t<button onclick=\"getElementById('hidden-div').style.display = 'block'\"> Show Answer <\/button> <button onclick=\"getElementById('hidden-div').style.display = 'none'\">Hide Answer<\/button><\/p>\n<div class=\"hidden-div\" id=\"hidden-div\"><span style=\"\"><\/p>\n<div class=\"answer\">Correct Answer: <strong>D<\/strong><\/div>\n<p><\/strong><\/span> <\/div>\n","protected":false},"excerpt":{"rendered":"<p>A company\u2019s Security Engineer is copying all application logs to centralized Amazon S3 buckets. Currently, each of the company\u2019s application is in its own AWS account, and logs are pushed into S3 buckets associated with each account. The Engineer will deploy an AWS Lambda function into each account that copies the relevant log files to [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3,187],"class_list":["post-194","post","type-post","status-publish","format-standard","hentry","category-aws-certified-security-specialty-scs-c01","tag-aws-certified-security-specialty-scs-c01","tag-question-185"],"_links":{"self":[{"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/posts\/194","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/comments?post=194"}],"version-history":[{"count":1,"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/posts\/194\/revisions"}],"predecessor-version":[{"id":246,"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/posts\/194\/revisions\/246"}],"wp:attachment":[{"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/media?parent=194"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/categories?post=194"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/tags?post=194"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}