Which statement is TRUE?

Answer options:

A.Bob can list contents of the logs bucket. Alice can read objects from the Development folder inside the logs bucket.
B.Both Alice and Bob can list all buckets.Alice can write objects into the Development folder inside the logs bucket.
C. Alice can write objects into logs bucket.Bob can not write objects into the Development folder inside the logs bucket.
D. Bob and Alice can list contents of all buckets.Bob and Alice can not write objects into the Development folder inside the logs bucket.

Answer: A
Option A is CORRECT because GroupPolicy2 has an explicit grant giving the IAM Group ListBucket permission on root level items of logs bucket; and InlinePolicy2 has an explicit grant giving Alice get object permissions on Development folder inside logs bucket.
Option B is incorrect because the bucket policy has explicit deny on put object permission for all users.
Option C is incorrect because bucket policy has explicit deny on put object permissions for all users.
Option D is incorrect because Bob and Alice do not have permission to list the contents of all buckets.They only have permissions to list root-level objects of the logs bucket.There is an implicit deny on all other buckets.
Reference:
https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html