Investigate a cloud permission failure without granting administrator access.

Instruction: Choose the evidence and the smallest justified permission correction.

Context:

A fictional production worker can list an object-storage bucket but cannot read one object. The object uses a customer-managed encryption key. An approved access design allows this worker to read that prefix. The error alone does not show whether object policy, identity policy or key authorization caused the failure.

Updated

Official answer available

Read the opening below, then unlock the full answer and practical guidance.

I would identify the worker's actual runtime identity, the exact object and operation, then inspect the relevant authorization decision and audit evidence...

Upgrade to view official answer

Related Questions