What is an "S3 bucket policy" and how does it differ from an IAM policy?
Correct! Well done.
Incorrect.
The correct answer is B) A bucket policy is a resource-based policy attached to an S3 bucket defining access permissions for it (including cross-account access), while an IAM policy is identity-based, attached to users, groups, or roles to define what actions they can perform
Correct Answer
A bucket policy is a resource-based policy attached to an S3 bucket defining access permissions for it (including cross-account access), while an IAM policy is identity-based, attached to users, groups, or roles to define what actions they can perform
Bucket policies are attached to the resource (the S3 bucket) and are useful for cross-account access scenarios, while IAM policies are attached to identities (users/roles) and can apply across multiple services.