ACL Cloud Security Architecture 4

Question 1

Which ACL-related cloud security concept ensures that service accounts and roles have only the permissions needed for their specific task?

Accepted Answer

Principle of least privilege

Answer

The principle of least privilege limits ACL grants to the minimum permissions required, reducing the blast radius of a compromised credential.

Question 2

A cloud engineer needs to allow an EC2 instance to read from S3 without embedding credentials. Which ACL mechanism achieves this securely?

Accepted Answer

IAM role with an attached S3 read policy assigned to the instance

Answer

IAM roles provide temporary credentials automatically rotated by AWS, avoiding the need to store long-term access keys on the instance.

Question 3

What is the purpose of a VPC Endpoint Policy in AWS cloud architecture?

Accepted Answer

To restrict which S3 buckets or actions are accessible through a VPC endpoint

Answer

VPC Endpoint Policies are resource-based ACLs that limit which principals and actions are allowed through the endpoint, preventing data exfiltration.

Question 4

In a multi-cloud ACL strategy, which approach best ensures consistent access control enforcement across AWS, Azure, and GCP?

Accepted Answer

Implement a Cloud Security Posture Management (CSPM) tool with unified policy engine

Answer

CSPM tools provide a centralized policy engine that translates and enforces consistent ACL rules across multiple cloud providers.

Question 5

Which cloud ACL misconfiguration most commonly leads to unauthorized data exposure in S3-like object storage services?

Accepted Answer

Public access settings disabled combined with overly permissive ACLs

Answer

When Block Public Access settings are disabled and bucket or object ACLs grant public-read, sensitive data becomes accessible to anyone on the internet.

(ACL) Access Control Lists Practice Test

(ACL) Access Control Lists Practice Test

ACL Cloud Security Architecture 4