Which action should be taken to share the S3 bucket?

A company needs to share an Amazon S3 bucket with an external vendor. The bucket owner must be able to access all objects.

Which action should be taken to share the S3 bucket?
A . Update the bucket to be a Requester Pays bucket
B . Update the bucket to enable cross-origin resource sharing (CPORS)
C . Create a bucket policy to require users to grant bucket-owner-full when uploading objects
D . Create an IAM policy to require users to grant bucket-owner-full control when uploading objects.

View Answer

Answer: A

Explanation:

https://aws.amazon.com/it/premiumsupport/knowledge-center/s3-bucket-owner-access/

By default, an S3 object is owned by the AWS account that uploaded it. This is true even when the bucket is owned by another account. To get access to the object, the object owner must explicitly grant you (the bucket owner) access. The object owner can grant the bucket owner full control of the object by updating the access control list (ACL) of the object. The object owner can update the ACL either during a put or copy operation, or after the object is added to the bucket.

Similar: https://aws.amazon.com/it/premiumsupport/knowledge-center/s3-require-object-ownership/

Resolution Add a bucket policy that grants users access to put objects in your bucket only when they grant you (the bucket owner) full control of the object.