SAP-C02 Question #412: Real Exam Question with Answer & Explanation

Question

A company is running applications on AWS in a multi-account environment. The company's sales team and marketing team use separate AWS accounts in AWS Organizations. The sales team stores petabytes of data in an Amazon S3 bucket. The marketing team uses Amazon QuickSight for data visualizations. The marketing team needs access to data that the sates team stores in the S3 bucket. The company has encrypted the S3 bucket with an AWS Key Management Service (AWS KMS) key. The marketing team has already created the IAM service role for QuickSight to provide QuickSight access in the marketing AWS account. The company needs a solution that will provide secure access to the data in the S3 bucket across AWS accounts. Which solution will meet these requirements with the LEAST operational overhead?

Options

• ACreate a new S3 bucket in the marketing account. Create an S3 replication rule in the sales
• BCreate an SCP to grant access to the S3 bucket to the marketing account. Use AWS Resource
• CUpdate the S3 bucket policy in the marketing account to grant access to the QuickSight role.
• DCreate an IAM role in the sales account and grant access to the S3 bucket. From the marketing