medium10 pts · first answer countsidentity-securityaws-iam

Restricting a bucket to your organization

A shared S3 bucket should be readable by any role in any of your 30 AWS accounts, but by nobody outside your AWS Organization. Which bucket policy approach fits best?

A.List all 30 account IDs and update the list for each new accountB.Use a condition on aws:PrincipalOrgID matching your organization IDC.Make the bucket public and rely on obscure object namesD.Use a condition on aws:SourceIp with your office IP range

Discussion 0

Join free to post in the discussion.

Restricting a bucket to your organization

Discussion 0

Related questions