An Application Is Being Developed to Audit Several AWS Accounts

question 245

Multiple Choice

An application is being developed to audit several AWS accounts. The application will run in Account A and must access AWS services in Accounts B and C. What is the MOST secure way to allow the application to call AWS services in each audited account?

• A) Configure cross-account roles in each audited account. Write code in Account A that assumes those roles
• B) Use S3 cross-region replication to communicate among accounts, with Amazon S3 event notifications to trigger Lambda functions
• C) Deploy an application in each audited account with its own role. Have Account A authenticate with the application
• D) Create an IAM user with an access key in each audited account. Write code in Account A that uses those access keys

---

Definitions:

Convertible Bonds

Bonds issued by a corporation that can be converted into a predetermined number of the company's shares at certain times during their life, usually at the discretion of the bondholder.

Restrictive Clauses

Provisions in contracts that limit certain activities or behaviors to protect contractual interests, often found in loan agreements and employment contracts.

Senior Debt

Debt that has priority over other unsecured or otherwise more junior debt owed by the issuer in the case of bankruptcy.

Debentures

A type of long-term debt instrument that is not secured by physical assets or collateral.