AWS Certified Solutions Architect - Professional SAP-C02 — Topic 1 Question 233

Question

A company is migrating its development and production workloads to a new organization in AWS Organizations. The company has created a separate member account for development and a separate member account for production. Consolidated billing is linked to the management account. In the management account, a solutions architect needs to create an IAM user that can stop or terminate resources in both member accounts. Which solution will meet this requirement?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Create an IAM user in the management account. In the member accounts, create cross-account roles that have least privilege access. Grant the IAM user access to the roles by using a trust policy. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified Solutions Architect - Professional SAP-C02 — Question 233