nerdexam
Amazon

DOP-C02 · Question #162

AnyCompany is using AWS Organizations to create and manage multiple AWS accounts. AnyCompany recently acquired a smaller company, Example Corp. During the acquisition process, Example Corp's single…

The correct answer is C. In the new member account, create a new IAM role that is named. https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.ht ml#orgs_manage_accounts_create-cross-account-role

Submitted by stefanr· Mar 6, 2026Security & Compliance

Question

AnyCompany is using AWS Organizations to create and manage multiple AWS accounts. AnyCompany recently acquired a smaller company, Example Corp. During the acquisition process, Example Corp's single AWS account joined AnyCompany's management account through an Organizations invitation. AnyCompany moved the new member account under an OU that is dedicated to Example Corp. AnyCompany's DevOps engineer has an IAM user that assumes a role that is named OrganizationAccountAccessRole to access member accounts. This role is configured with a full access policy. When the DevOps engineer tries to use the AWS Management Console to assume the role in Example Corp's new member account, the DevOps engineer receives the following error message: "Invalid information in one or more fields. Check your information or contact your administrator." Which solution will give the DevOps engineer access to the new member account?

Options

  • AIn the management account, grant the DevOps engineer's IAM user permission to assume the
  • BIn the management account, create a new SCP. In the SCP, grant the DevOps engineer's IAM
  • CIn the new member account, create a new IAM role that is named
  • DIn the new member account, edit the trust policy for the OrganizationAccountAccessRole IAM

How the community answered

(47 responses)
  • A
    4% (2)
  • B
    13% (6)
  • C
    77% (36)
  • D
    6% (3)

Explanation

https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.ht ml#orgs_manage_accounts_create-cross-account-role

Topics

#AWS Organizations#IAM Roles#Cross-Account Access#OrganizationAccountAccessRole

Community Discussion

No community discussion yet for this question.

Full DOP-C02 Practice