SCS-C02 · Question #137
A security engineer is creating an AWS Lambda function. The Lambda function needs to use a role that is named LambdaAuditRole to assume a role that is named AcmeAuditFactoryRole in a different AWS…
The correct answer is A. Ensure that LambdaAuditRole has the sts:AssumeRole permission for AcmeAuditFactoryRole. C. Ensure that the trust policy for AcmeAuditFactoryRole allows the sts:AssumeRole action from. https://repost.aws/knowledge-center/lambda-function-assume-iam-role
Question
A security engineer is creating an AWS Lambda function. The Lambda function needs to use a role that is named LambdaAuditRole to assume a role that is named AcmeAuditFactoryRole in a different AWS account. When the code is processed, the following error message appears: "An error occurred (AccessDenied) when calling the AssumeRole operation." Which combination of steps should the security engineer take to resolve this error? (Choose two.)
Options
- AEnsure that LambdaAuditRole has the sts:AssumeRole permission for AcmeAuditFactoryRole.
- BEnsure that LambdaAuditRole has the AWSLambdaBasicExecutionRole managed policy
- CEnsure that the trust policy for AcmeAuditFactoryRole allows the sts:AssumeRole action from
- DEnsure that the trust policy for LambdaAuditRole allows the sts:AssumeRole action from the
- EEnsure that the sts:AssumeRole API call is being issued to the us-east-1 Region endpoint.
How the community answered
(35 responses)- A83% (29)
- B6% (2)
- D9% (3)
- E3% (1)
Explanation
https://repost.aws/knowledge-center/lambda-function-assume-iam-role
Topics
Community Discussion
No community discussion yet for this question.