AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 87

Question

An Amazon EC2 instance is running in a VPC and needs to download an object from a restricted Amazon S3 bucket. When the DevOps engineer tries to download the object, an AccessDenied error is received. What are the possible causes for this error? (Choose two.)

Accepted Answer

Correct answer: B, D. The correct answer is B, D. Option B: There is an error in the S3 bucket policy. Option D: There is an error in the IAM role configuration. Amazon S3 provides durable, scalable object storage that is fully managed. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 87