SAP-C02 Question 389

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  B is right Using IAM user credentials: The solution architect should use the Support1 IAM user credentials from the management account to create IAM users in the new member account, not the root account credentials. Assuming roles: By switching roles using the OrganizationAccountAccessRole role with the account ID of the new member account, the solution architect can access the resources and perform actions on behalf of the new member account without using the management account's root credentials.

• Chose B1

  Option B

• 8

  Option B correct: Key word - "OrganizationAccountAccessRole", By assuming the OrganizationAccountAccessRole, you gain temporary, controlled access to the member account without sharing root credentials or creating separate IAM users for cross-account access. This enhances security and reduces administrative overhead.