Amazon
DVA-C02 · Question #442
A developer is deploying an application on Amazon EC2 instances that run in Account A. The application needs to read data from an existing Amazon Kinesis data stream in Account B. Which actions should
The correct answer is B. Create an IAM role with stream read permissions in Account B. C. Add a trust policy to the instance profile role and IAM role in Account B to allow the instance. https://aws.amazon.com/blogs/security/how-to-use-trust-policies-with-iam-roles
Submitted by tom_us· Mar 5, 2026Security
Question
A developer is deploying an application on Amazon EC2 instances that run in Account A. The application needs to read data from an existing Amazon Kinesis data stream in Account B. Which actions should the developer take to provide the application with access to the stream? (Choose two.)
Options
- AUpdate the instance profile role in Account A with stream read permissions.
- BCreate an IAM role with stream read permissions in Account B.
- CAdd a trust policy to the instance profile role and IAM role in Account B to allow the instance
- DAdd a trust policy to the instance profile role and IAM role in Account B to allow reads from the
- EAdd a resource-based policy in Account B to allow read access from the instance profile role.
How the community answered
(25 responses)- A4% (1)
- B56% (14)
- D28% (7)
- E12% (3)
Explanation
https://aws.amazon.com/blogs/security/how-to-use-trust-policies-with-iam-roles
Community Discussion
No community discussion yet for this question.