A SysOps Administrator implemented the following bucket policy to allow only the corporate IP address range of 54.240.143.0/24 to access objects in an Amazon S3 bucket. Some employees are reporting that they are able to access the S3 bucket from IP addresses outside the corporate IP address range. How can the Administrator address this issue?
A) Modify the Condition operator to include both NotIpAddress and IpAddress to prevent unauthorized access to the S3 bucket. Modify the Condition operator to include both NotIpAddress and IpAddress to prevent unauthorized access to the S3 bucket.
B) Modify the Condition element from the IAM policy to aws:StringEquals instead of aws:SourceIp . element from the IAM policy to aws:StringEquals instead of aws:SourceIp .
C) Modify the IAM policy instead of the bucket policy to restrict users from accessing the bucket based on their source IP addresses.
D) Change Effect from Allow to Deny in the second statement of the policy to deny requests not from the source IP range. Change Effect from Allow to Deny in the second statement of the policy to deny requests not from the source IP range.

Question

A SysOps Administrator implemented the following bucket policy to allow only the corporate IP address range of 54.240.143.0/24 to access objects in an Amazon S3 bucket.  Some employees are reporting that they are able to access the S3 bucket from IP addresses outside the corporate IP address range. How can the Administrator address this issue?
A) Modify the Condition operator to include both NotIpAddress and IpAddress to prevent unauthorized access to the S3 bucket. Modify the Condition operator to include both NotIpAddress and IpAddress to prevent unauthorized access to the S3 bucket. 
B) Modify the Condition element from the IAM policy to aws:StringEquals instead of aws:SourceIp . element from the IAM policy to aws:StringEquals instead of aws:SourceIp . 
C) Modify the IAM policy instead of the bucket policy to restrict users from accessing the bucket based on their source IP addresses. 
D) Change Effect from Allow to Deny in the second statement of the policy to deny requests not from the source IP range. Change Effect from Allow to Deny in the second statement of the policy to deny requests not from the source IP range.

Quizplus · Accepted Answer

The Answer of A SysOps Administrator implemented the following bucket policy to allow only the corporate IP address range of 54.240.143.0/24 to access objects in an Amazon S3 bucket.  Some employees are reporting that they are able to access the S3 bucket from IP addresses outside the corporate IP address range. How can the Administrator address this issue?
A) Modify the Condition operator to include both NotIpAddress and IpAddress to prevent unauthorized access to the S3 bucket. Modify the Condition operator to include both NotIpAddress and IpAddress to prevent unauthorized access to the S3 bucket. 
B) Modify the Condition element from the IAM policy to aws:StringEquals instead of aws:SourceIp . element from the IAM policy to aws:StringEquals instead of aws:SourceIp . 
C) Modify the IAM policy instead of the bucket policy to restrict users from accessing the bucket based on their source IP addresses. 
D) Change Effect from Allow to Deny in the second statement of the policy to deny requests not from the source IP range. Change Effect from Allow to Deny in the second statement of the policy to deny requests not from the source IP range.

A SysOps Administrator Implemented the Following Bucket Policy to Allow