hard20 pts · first answer countscloud-securityiam-policiesaws-organizations

Allow only your organization

A shared artifacts bucket must be readable by any account in your AWS Organization, including accounts created next year, but by no one else. Which approach fits best?

A.List every current account ID in the Principal elementB.Principal "*" with a condition aws:PrincipalOrgID equal to your org IDC.Make the bucket public and rely on obscure object namesD.Principal "*" with a condition aws:SourceIp for the office

Discussion 0

Join free to post in the discussion.

Allow only your organization

Discussion 0

Related questions