nerdexam
AmazonAmazon

DEA-C01 · Question #259

DEA-C01 Question #259: Real Exam Question with Answer & Explanation

Sign in or unlock DEA-C01 to reveal the answer and full explanation for question #259. The question stem and answer options stay visible for context.

Data Security and Governance

Question

A company uses an organization in AWS Organizations to manage multiple AWS accounts. The company uses an enhanced fanout data stream in Amazon Kinesis Data Streams to receive streaming data from multiple producers. The company runs the data stream in an account named Account A. The company wants to use an AWS Lambda function in an account named Account В to process the data from the data stream. The company creates a Lambda execution role in Account В that has permissions to access data from the data stream in Account A. What additional step must the company take to meet this requirement?

Options

  • ACreate a service control policy (SCP) to grant the data stream read access to the cross-account
  • BAdd a resource-based policy to the data stream to allow read access for the cross-account
  • CCreate a service control policy (SCP) to grant the data stream read access to the cross-account
  • DAdd a resource-based policy to the cross-account Lambda function to grant the data stream read

Unlock DEA-C01 to see the answer

You've previewed enough free DEA-C01 questions. Unlock DEA-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Cross-account access#IAM policies#Kinesis Data Streams#Resource-based policies
Full DEA-C01 PracticeBrowse All DEA-C01 Questions