Pick the safer IAM policy.
Your Lambda function needs to read objects from ONE specific
S3 bucket. Which IAM policy is most aligned with the principle of
least privilege?
A) "Action: *", "Resource: *" — easiest.
B) "Action: s3:GetObject", "Resource: arn:aws:s3:::my-bucket/*" only.
C) AdministratorAccess managed policy.
D) "Action: s3:*", "Resource: *".
Sign in to save your code and track progress across devices.
