SAP-C02 Question 102

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose ACE1

  The correct answer is A, C, and E: A: Creates the necessary permissions to write to the S3 bucket. C: Creates a role in the production account that can be assumed by the development account. E: Gives the design team (in the development account) permission to assume the cross-account role. This setup follows AWS best practices for secure cross-account access with least privilege and isolation.

• 1

  A. In the production account, create a new IAM policy that allows read and write access to the S3 bucket. D. In the development account, create a role. Attach the new policy to the role Define the production account as a trusted entity. E. In the development account, create a group that contains all the IAM users of the design team Attach a different IAM policy to the group to allow the sts:AssumeRole action on the role In the production account.

• Chose ACE1

  ACE. F is a trap.