AWS Certified Cloud Practitioner

Question 01

A company wants to prevent an S3 bucket's objects from ever being made public, even by an accidental permissive ACL or policy, by enabling one bucket-level safeguard that overrides such settings. Which S3 feature provides this?

Question 02

A retailer's security team wants to analyze resource-based policies such as S3 bucket policies and IAM role trust policies to discover which resources are shared with external accounts or made public, so unintended external access can be reviewed. Which IAM capability provides this?

Question 03

An operations team wants a serverless event bus that receives events from AWS services and integrated third-party SaaS applications such as Zendesk, then uses routing rules to deliver matching events to targets like AWS Lambda functions. Which AWS service provides this capability?