A user is enabling logging on a particular bucket. Which of the below mentioned options may be best suitable to allow
access to the log bucket?
A.
Create an IAM policy and allow log access
B.
It is not possible to enable logging on the S3 bucket
C.
Create an IAM Role which has access to the log bucket
D.
Provide ACL for the logging group
Explanation:
The only recommended use case for the S3 bucket ACL is to grant the write permission to the Amazon S3 Log Delivery
group to write access log objects to the user’s bucket.
http://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-alternatives-guidelines.html
D
D