AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 111

Question

A security engineer is creating an AWS Lambda function. The Lambda function needs to use a role that is named LambdaAuditRole to assume a role that is named AcmeAuditFactoryRole in a different AWS account. When the code is processed, the following error message appears: "An error occurred (AccessDenied) when calling the AssumeRole operation." Which combination of steps should the security engineer take to resolve this error? (Choose two.)

Accepted Answer

Correct answer: A, C. The correct answer is A, C. Option A: Ensure that LambdaAuditRole has the sts:AssumeRole permission for AcmeAuditFactoryRole. Option C: Ensure that the trust policy for AcmeAuditFactoryRole allows the sts:AssumeRole action from LambdaAuditRole. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS Certificate Manager provisions and renews TLS certificates automatically.

AWS Certified Security - Specialty SCS-C02 — Question 111