AWS Certified SysOps Administrator – Associate (legacy) — Question 180

A root account owner is trying to understand the S3 bucket ACL. Which of the below mentioned options cannot be used to grant ACL on the object using the authorized predefined group?

Answer options

• A. Authenticated user group
• B. All users group
• C. Log Delivery Group
• D. Canonical user group

Correct answer: D

Explanation

The correct answer is D, as the Canonical user group cannot be used to grant ACL permissions on an object. In contrast, the other options—Authenticated user group, All users group, and Log Delivery Group—are all recognized predefined groups that can be utilized for this purpose.