AWS Certified DevOps Engineer – Professional (DOP-C02) — Question 106

An Amazon EC2 instance is running in a VPC and needs to download an object from a restricted Amazon S3 bucket. When the DevOps engineer tries to download the object, an AccessDenied error is received.

What are the possible causes for this error? (Choose two.)

Answer options

• A. The S3 bucket default encryption is enabled.
• B. There is an error in the S3 bucket policy.
• C. The object has been moved to S3 Glacier.
• D. There is an error in the IAM role configuration.
• E. S3 Versioning is enabled.

Correct answer: B, D

Explanation

The AccessDenied error is often due to an incorrect S3 bucket policy (B) or IAM role misconfiguration (D). While the other options may affect accessibility in different contexts, they do not directly cause this specific error when trying to download an object.