Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS is retiring this exam on Nov 30, 2026.
Replacement: DVA-C03 Practice Exam
Question 38 of 167
Free Preview · 167 of 554 · questions 1–167 of 554 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-policy-language-overview.html For example, the s3:ListBucket permission allows the user to use the Amazon S3 ListObjectsV2 operation. (The s3:ListBucket permission is a case where the action name doesn't map directly to the operation name.)
A) Eliminated - Too permissive: Grants more permissions than needed (S3:*), violating the principle of least privilege. B) Correct - Minimal permissions: Only grants the permission needed for the application to perform the ListBucket operation. Permissions are tied to the EC2 instance's IAM instance profile, limiting access to that instance. C) Eliminated - The developer’s permissions are unrelated to the application running on the EC2 instance. D) Eliminated - Grants permissions at the S3 bucket policy level, which applies to all resources in the account, not just the EC2 instance.
B is the correct answer.