Customer data is stored in an S3 bucket.
Only an approved application should be able to read the objects.
Which action is the customer's responsibility?
AWS provides the S3 infrastructure, while the customer configures IAM, bucket policies, public-access controls, and data protection.
Detailed explanation
The customer defines who can access S3 data through IAM and resource policies.
The customer defines who can access S3 data through IAM and resource policies.
The service infrastructure is maintained by AWS.
The service infrastructure is maintained by AWS.
Physical facility protection is an AWS responsibility.
Physical facility protection is an AWS responsibility.
Physical hardware maintenance is handled by AWS.
Physical hardware maintenance is handled by AWS.
Check official documentation
Compare the following points with the official documentation.
Amazon S3 User GuideのIdentity and access managementとBlock Public Accessの説明を確認する。
What to confirm
バケットポリシーとIAMによるアクセス制御は利用者が設定する。
Key points
- S3 bucket policy
- IAM permissions
- Data access control
Notes
- Environment: AWS公式ドキュメントのS3アクセス管理確認
- Confirm the service-specific responsibility boundary in the current AWS documentation.
Foundation review
Data access
The customer decides which principals may read or write its objects.
Configuration responsibility
Policies and public-access settings are customer-controlled settings.