AWS Certified Solutions Architect - Professional SAP-C02 — Topic 1 Question 309

Question

A company is using AWS Organizations with a multi-account architecture. The company's current security configuration for the account architecture includes SCPs, resource-based policies, identity-based policies, trust policies, and session policies. A solutions architect needs to allow an IAM user in Account A to assume a role in Account B. Which combination of steps must the solutions architect take to meet this requirement? (Choose three.)

Accepted Answer

Correct answer: A, C, E. The correct answer is A, C, E. Option A: Configure the SCP for Account A to allow the action. Option C: Configure the identity-based policy on the user in Account A to allow the action. Option E: Configure the trust policy on the target role in Account B to allow the action. Service Control Policies set guardrails on what accounts in an organization can do. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Solutions Architect - Professional SAP-C02 — Question 309