Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Professional · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The most secure way for a partner company in a different AWS Organization to access a customer’s resources is for the customer to create an IAM role with least-privilege permissions and include an external ID in the trust policy. The partner company can then assume the role using the ARN and external ID via the AWS STS API. This approach prevents confused deputy attacks and aligns with AWS best practices for cross-account access between third-party services and customer accounts.
D. The customer should create an IAM role and assign the required permissions to the IAM role. The partner company should then use the IAM role’s Amazon Resource Name (ARN), including the external ID in the IAM role’s trust policy, when requesting access to perform the required tasks. A - that is just hilarious and should not be the case.
D. The customer should create an IAM role and assign the required permissions to the IAM role. The partner company should then use the IAM role’s Amazon Resource Name (ARN), including the external ID in the IAM role’s trust policy, when requesting access to perform the required tasks.