Resource-Based Policies Quiz

What you'll be asked

1. Which of the following is the primary characteristic of a resource-based policy?
2. When an IAM user attempts to access an S3 bucket that has both an identity-based policy and a resource-based policy, how is the access decision determined?
3. You want to allow a user from a different AWS account to access a specific S3 bucket in your account. Which policy type is the most appropriate for this cross-account scenario?
4. If you are configuring a resource-based policy for an SQS queue, what is the mandatory element that must be included to define who is being granted or denied access?
5. A developer has an identity-based policy that allows 's3:*' on a bucket, but the bucket's resource-based policy contains an explicit 'Deny' for that same user. What is the result of an access request?

Answers and explanations come after you submit.