An IAM user is trying to perform an action on an object belonging to some other root account’s bucket.
Which of the below mentioned options will AWS S3 not verify?
The object owner has provided access to the IAM user
Permission provided by the parent of the IAM user on the bucket
Permission provided by the bucket owner to the IAM user
Permission provided by the parent of the IAM user
Explanations:
AWS S3 checks if the object owner has provided access to the IAM user when attempting actions.
AWS S3 does not verify permissions set by the IAM user’s parent account on a different bucket.
AWS S3 verifies if the bucket owner has granted access to the IAM user attempting the action.
AWS S3 checks if permissions are provided by the IAM user’s parent account for the specific IAM user.
I calculate that the answer is:
Permission provided by the parent of the IAM user on the bucket