ExamQuestions.com

Register
Login
AWS Certified SysOps Administrator Associate Exam Questions

Amazon

AWS Certified SysOps Administrator Associate

164 / 340

Question 164:

Your team member has defined the following bucket policy on one of the buckets.
{
 "Version": "2012-10-17",
"Id": "Sample123",
"Statement": [
{
"Sid": "",
"Effect": "Deny",
"Principal": "*",
"Action": "s3:*",
"Resource": "arn:aws:s3:::examplebucket/*",
"Condition": { "Null": { "aws:MultiFactorAuthAge": true }}
}
]
 }
What does this bucket policy do?

Answer options:

A.Allows access to the bucket if the IAM user has successfully logged into the console using a password.
B.Allows access to the bucket if the IAM user has successfully logged into the console using Access keys.
C.Denies access to the bucket if the user has used an MFA device for authentication.
D.Denies access to the Bucket if the user is not authenticating via MFA device.