A Company Uses AWS Organization to Manage 50 AWS Accounts

question 21

Multiple Choice

A company uses AWS Organization to manage 50 AWS accounts. The finance staff members logs in as AWS IAM users in the FinanceDept AWS account. The staff members need to read the consolidates billing information in the MasterPayer AWS account. They should not be able to view any other resources in the MasterPayer AWS account. IAM access to billing has been enabled in the MasterPayer account. Which of the following approaches grants the finance staff the permissions they require without granting any unnecessary permissions?

• A) Create an IAM group for the finance users in the FinanceDept account, then attach the AWS managed ReadOnlyAccess IAM policy to the group.
• B) Create an IAM group for the finance users in the MasterPayer account, then attach the AWS managed ReadOnlyAccess IAM policy to the group.
• C) Create an AWS IAM role in the FinanceDept account with the ViewBilling permission, then grant the finance users in the MasterPayer account the permission to assume that role.
• D) Create an AWS IAM role in the MasterPayer account with the ViewBilling permission, then grant the finance users in the FinanceDept account the permission to assume that role.

---

Definitions:

1877

The year marked by significant events in the United States, including the end of the Reconstruction era following the Civil War.

Wage Increases

The raising of the amount of money that workers are paid for their labor.

Knights Of Labor

An influential 19th-century American labor organization that aimed to protect and promote the interests of workers, advocating for an eight-hour workday and the abolition of child labor.

Wage Labor

A socioeconomic relationship between a worker and an employer, where the worker sells their labor under a formal or informal employment contract, and is paid a regular wage or salary.