A Company Has Multiple Child Accounts That Are Part of an Organization

question 566

Multiple Choice

A company has multiple child accounts that are part of an organization in AWS Organizations. The security team needs to review every Amazon EC2 security group and their inbound and outbound rules. The security team wants to programmatically retrieve this information from the child accounts using an AWS Lambda function in the master account of the organization. Which combination of access changes will meet these requirements? (Choose three.)

• A) Create a trust relationship that allows users in the child accounts to assume the master account IAM role.
• B) Create a trust relationship that allows users in the master account to assume the IAM roles of the child accounts.
• C) Create an IAM role in each child account that has access to the AmazonEC2ReadOnlyAccess managed policy.
• D) Create an IAM role in each child account to allow the sts:AssumeRole action against the master account IAM role's ARN.
• E) Create an IAM role in the master account that allows the sts:AssumeRole action against the child account IAM role's ARN.
• F) Create an IAM role in the master account that has access to the AmazonEC2ReadOnlyAccess managed policy.

---

Definitions:

Excludes 1

A term used in coding and classification systems to indicate that conditions listed are not included within the section or code.

ICD-10-CM General Note

Guidelines and notes associated with the International Classification of Diseases, 10th Revision, Clinical Modification, used for coding and classifying morbidity data.

Mutually Exclusive Codes

Codes in a classification system that categorize information so that each item is assigned to only one category that does not overlap with others.

Combination Code

A system of symbols or numbers used to gain access or unlock something, typically requiring a specific sequence.