AWS Certified Cloud Practitioner (CLF-C02) — Question 159

A company wants to identify Amazon S3 buckets that are shared with another AWS account.

Which AWS service or feature will meet these requirements?

Answer options

• A. AWS Lake Formation
• B. IAM credential report
• C. Amazon CloudWatch
• D. IAM Access Analyzer

Correct answer: D

Explanation

IAM Access Analyzer is designed to help identify resources shared with external entities, including other AWS accounts, making it the correct choice. The other options, such as AWS Lake Formation, IAM credential report, and Amazon CloudWatch, do not specifically focus on analyzing access permissions for S3 buckets in relation to other AWS accounts.