SAP-C02 Question 244

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  D is incorrect. OrganizationAccountAccessRole will have AdministratorAccess privileage.

• 1

  D Ans D. STS AssumeRole with OrganizationAccountAccessRole in Member Account: Pros: Follows best practices for cross-account access using temporary credentials. Minimizes complexity by leveraging the pre-existing OrganizationAccountAccessRole. Cons: Security team needs access to each member account to assume the role. Therefore, option D, using AWS STS to call the AssumeRole API for the OrganizationAccountAccessRole in each member account from the security account, is the most secure and efficient solution. This approach leverages existing IAM roles, minimizes configuration overhead, and adheres to best practices for cross-account access using temporary credentials.

• 1

  just B