A Company Has a Multi-Account AWS Environment That Includes the Following

question 536

Multiple Choice

A company has a multi-account AWS environment that includes the following: A central identity account that contains all IAM users and groups Several member accounts that contain IAM roles A SysOps administrator must grant permissions for a particular IAM group to assume a role in one of the member accounts. How should the SysOps administrator accomplish this task?

• A) In the member account, add sts:AssumeRole permissions to the role's policy. In the identity account, add a trust policy to the group that specifies the account number of the member account.
• B) In the member account, add the group Amazon Resource Name (ARN) to the role's trust policy. In the identity account, add an inline policy to the group with sts:AssumeRole permissions.
• C) In the member account, add the group Amazon Resource Name (ARN) to the role's trust policy. In the identity account, add an inline policy to the group with sts:PassRole permissions.
• D) In the member account, add the group Amazon Resource Name (ARN) to the role's inline policy. In the identity account, add a trust policy to the group with sts:AssumeRole permissions.

---

Definitions:

Succession Plans

Strategies developed by organizations to identify and develop future leaders to replace current ones when they leave or retire.

Work Hours

The scheduled hours during which an employee is expected to perform work duties.

Productivity Levels

Measures of output or efficiency indicating how effectively resources are utilized in producing goods or services.

Juniority Provisions

Clauses in employment agreements or policies that determine benefits and status based on an employee's length of service or tenure.