nerdexam
Amazon

SCS-C02 · Question #137

A security engineer is creating an AWS Lambda function. The Lambda function needs to use a role that is named LambdaAuditRole to assume a role that is named AcmeAuditFactoryRole in a different AWS…

The correct answer is A. Ensure that LambdaAuditRole has the sts:AssumeRole permission for AcmeAuditFactoryRole. C. Ensure that the trust policy for AcmeAuditFactoryRole allows the sts:AssumeRole action from. https://repost.aws/knowledge-center/lambda-function-assume-iam-role

Submitted by fatema_kw· Mar 6, 2026Identity and Access Management

Question

A security engineer is creating an AWS Lambda function. The Lambda function needs to use a role that is named LambdaAuditRole to assume a role that is named AcmeAuditFactoryRole in a different AWS account. When the code is processed, the following error message appears: "An error occurred (AccessDenied) when calling the AssumeRole operation." Which combination of steps should the security engineer take to resolve this error? (Choose two.)

Options

  • AEnsure that LambdaAuditRole has the sts:AssumeRole permission for AcmeAuditFactoryRole.
  • BEnsure that LambdaAuditRole has the AWSLambdaBasicExecutionRole managed policy
  • CEnsure that the trust policy for AcmeAuditFactoryRole allows the sts:AssumeRole action from
  • DEnsure that the trust policy for LambdaAuditRole allows the sts:AssumeRole action from the
  • EEnsure that the sts:AssumeRole API call is being issued to the us-east-1 Region endpoint.

How the community answered

(35 responses)
  • A
    83% (29)
  • B
    6% (2)
  • D
    9% (3)
  • E
    3% (1)

Explanation

https://repost.aws/knowledge-center/lambda-function-assume-iam-role

Topics

#cross-account role assumption#trust policy#STS AssumeRole#IAM permissions

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice