Telecom firm provides access to data stored in Amazon S3 bucket to external vendors on a project basis. Once the project is completed, public access to this Amazon S3 bucket is removed. During the security check, it was found that some of the buckets still have public access even though projects are completed. Security Head needs you to determine all Amazon S3 buckets with public access. Which of the following actions can be initiated to complete this task in the shortest time frame?

Answer options:

A.Use Access Analyser & create a report to find all Amazon S3 buckets with Public Access.
B.Use Amazon S3 console & find all buckets with public Tag.
C.Run Crone tool from CLI to determine Amazon S3 bucket with public access.
D.Verify all Bucket ACLs from CLI to determine Amazon S3 bucket with public access.

Correct Answer – A
Access Analyzer can be enabled to get a list of all Amazon S3 buckets with public access. It can help to gather the following information.
· Bucket name
· Discovered by Access analyzer
· Shared through
· Status
· Access Level 
Option C is incorrect as additional work needs to be done for the creation of the crone tool.
Option B & D are incorrect as this is a manual process & will require additional admin work.
For more information on Amazon S3 Access Analyzer, refer to the following URL-
https://docs.aws.amazon.com/AmazonS3/latest/user-guide/access-analyzer.html