An AWS Partner Company Is Building a Service in AWS

question 314

Multiple Choice

An AWS partner company is building a service in AWS Organizations using its organization named org1. This service requires the partner company to have access to AWS resources in a customer account, which is in a separate organization named org2. The company must establish least privilege security access using an API or command line tool to the customer account. What is the MOST secure way to allow org1 to access resources in org2?

• A) The customer should provide the partner company with their AWS account access keys to log in and perform the required tasks.
• B) The customer should create an IAM user and assign the required permissions to the IAM user. The customer should then provide the credentials to the partner company to log in and perform the required tasks.
• C) The customer should create an IAM role and assign the required permissions to the IAM role. The partner company should then use the IAM role's Amazon Resource Name (ARN) when requesting access to perform the required tasks.
• D) The customer should create an IAM role and assign the required permissions to the IAM role. The partner company should then use the IAM role's Amazon Resource Name (ARN), including the external ID in the IAM role's trust policy, when requesting access to perform the required tasks.

---

Definitions:

Pitch

The perceived frequency of a sound or note, often determining its highness or lowness.

Loudness

The perception of the intensity of sound, typically measured in decibels, affecting how loud or soft we perceive a sound to be.

Cochlea

A spiral-shaped cavity of the inner ear that plays a key role in the sense of hearing by converting sound vibrations into neural signals.

Fluid-filled Tunnel

A hollow structure within the body containing fluid, often referring to structures within the inner ear.