SCS-C03 Question #134: Real Exam Question with Answer & Explanation

Question

A company uses several AWS CloudFormation stacks to handle the deployment of a suite of applications. The leader of the company's application development team notices that the stack deployments fail with permission errors when some team members try to deploy the stacks. However, other team members can deploy the stacks successfully. The team members access the account by assuming a role that has a specific set of permissions. All team members have permissions to perform operations on the stacks. Which combination of steps will ensure consistent deployment of the stacks MOST securely? (Select THREE.)

Options

• ACreate a service role that has a composite principal that contains each service that needs the
• BCreate a service role that has cloudformation.amazonaws.com as the service principal.
• CAdd policies that reference each CloudFormation stack ARN.
• DAdd policies that reference the ARNs of each AWS service that requires permissions.
• EUpdate each stack to use the service role.
• FAdd a policy to each member role to allow the iam:PassRole action for the service role.