AWS Certified Data Analytics Specialty(DAS-C01)- Quiz 1

Q1.
A company uses two AWS accounts for accessing various AWS services. Analytics team has just configured an Amazon S3 bucket in AWS account A for writing data from the Amazon Redshift cluster provisioned in AWS account B. The team has noticed that the files created in the S3 bucket using UNLOAD command from the Redshift cluster are not accessible to the bucket owner user of the AWS account A that created the S3 bucket. What could be the reason for this denial of permission for resources belonging to the same AWS account?

When two different AWS accounts are accessing an S3 bucket, both the accounts need to share the bucket policies, explicitly defining the actions possible for each account. An erroneous policy can lead to such permission failures

By default, an S3 object is owned by the AWS account that uploaded it. So the S3 bucket owner will not implicitly have access to the objects written by the Redshift cluster.

The owner of an S3 bucket has implicit access to all objects in his bucket. Permissions are set on objects after they are completely copied to the target location. Since the owner is unable to access the uploaded files, it is possible that the write operation is still in progress..

When objects are uploaded to an S3 bucket from a different AWS account, the S3 bucket owner will get implicit permissions to access these objects. It is an upload error that can be fixed by providing manual access from AWS console

WHY A IS False?	CONCEPT: S3 object access	This is distractor statement. By default, an S3 object is owned by the AWS account that uploaded it. So the S3 bucket owner will not implicitly have access to the objects written by the Redshift cluster
WHY B IS True?	CONCEPT: S3 object access	By default, an S3 object is owned by the AWS account that uploaded it. This is true even when the bucket is owned by another account. Because the Amazon Redshift data files from the UNLOAD command were put into your bucket by another account, you (the bucket owner) don't have default permission to access those files. So the S3 bucket owner will not implicitly have access to the objects written by the Redshift cluster. To get access to the data files, an AWS Identity and Access Management (IAM) role with cross-account permissions must run the UNLOAD command again.
WHY C IS False?	CONCEPT: S3 object access	This is distractor statement. By default, an S3 object is owned by the AWS account that uploaded it. So the S3 bucket owner will not implicitly have access to the objects written by the Redshift cluster
WHY D IS False?	CONCEPT: S3 object access	This is distractor statement. By default, an S3 object is owned by the AWS account that uploaded it. So the S3 bucket owner will not implicitly have access to the objects written by the Redshift cluster
Short Trick	As it is "UNLOAD command from the Redshift cluster " & "Amazon Redshift cluster provisioned in AWS account B"- so by default, you will not access to those files as By default, an S3 object is owned by the AWS account that uploaded it.
References:	REFERNCED DOCS