DOP-C02 · Question #162
AnyCompany is using AWS Organizations to create and manage multiple AWS accounts. AnyCompany recently acquired a smaller company, Example Corp. During the acquisition process, Example Corp's single…
The correct answer is C. In the new member account, create a new IAM role that is named. https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.ht ml#orgs_manage_accounts_create-cross-account-role
Question
AnyCompany is using AWS Organizations to create and manage multiple AWS accounts. AnyCompany recently acquired a smaller company, Example Corp. During the acquisition process, Example Corp's single AWS account joined AnyCompany's management account through an Organizations invitation. AnyCompany moved the new member account under an OU that is dedicated to Example Corp. AnyCompany's DevOps engineer has an IAM user that assumes a role that is named OrganizationAccountAccessRole to access member accounts. This role is configured with a full access policy. When the DevOps engineer tries to use the AWS Management Console to assume the role in Example Corp's new member account, the DevOps engineer receives the following error message: "Invalid information in one or more fields. Check your information or contact your administrator." Which solution will give the DevOps engineer access to the new member account?
Options
- AIn the management account, grant the DevOps engineer's IAM user permission to assume the
- BIn the management account, create a new SCP. In the SCP, grant the DevOps engineer's IAM
- CIn the new member account, create a new IAM role that is named
- DIn the new member account, edit the trust policy for the OrganizationAccountAccessRole IAM
How the community answered
(47 responses)- A4% (2)
- B13% (6)
- C77% (36)
- D6% (3)
Explanation
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.ht ml#orgs_manage_accounts_create-cross-account-role
Topics
Community Discussion
No community discussion yet for this question.