A company is subject to regulatory audits of its financial information. External auditors who use a single AWS account need access to the company's AWS account. A solutions architect must provide…

Question

Options

• AIn the company's AWS account, create resource policies for all resources in the account to grant
• BIn the company's AWS account create an IAM role that trusts the auditors' AWS account Create
• CIn the company's AWS account, create an IAM user. Attach the required IAM policies to the IAM
• DIn the company's AWS account, create an IAM group that has the required permissions Create an

• A
  8% (4)
• B
  75% (40)
• C
  13% (7)
• D
  4% (2)

Explanation

This solution will allow the external auditors to have read-only access to the company's AWS account while being compliant with AWS security best practices. By creating an IAM role, which is a secure and flexible way of granting access to AWS resources, and trusting the auditors' AWS account, the company can ensure that the auditors only have the permissions that are required for their role and nothing more. Assigning a unique external ID to the role's trust policy, it will ensure that only the auditors' AWS account can assume the role. AWS IAM Roles documentation: https://aws.amazon.com/iam/features/roles/ AWS IAM Best practices: https://aws.amazon.com/iam/security-best-practices/

No community discussion yet for this question.