Amazon
SOA-C02 · Question #147
A company has an AWS Lambda function in Account A. The Lambda function needs to read the objects in an Amazon S3 bucket in Account B. A SysOps administrator must create corresponding IAM roles in…
The correct answer is A. In Account A, create a Lambda execution role to assume the role in Account B. https://aws.amazon.com/premiumsupport/knowledge-center/lambda-function-assume-iam-role/
Submitted by kwame.gh· Mar 30, 2026Security and Compliance
Question
A company has an AWS Lambda function in Account A. The Lambda function needs to read the objects in an Amazon S3 bucket in Account B. A SysOps administrator must create corresponding IAM roles in both accounts. Which solution will meet these requirements?
Options
- AIn Account A, create a Lambda execution role to assume the role in Account B.
- BIn Account A, create a Lambda execution role that provides access to the S3 bucket.
- CIn Account A, create a role that the function can assume.
- DIn Account A, create a role that the function can assume to gain access to the S3 bucket.
How the community answered
(25 responses)- A72% (18)
- B16% (4)
- C8% (2)
- D4% (1)
Explanation
https://aws.amazon.com/premiumsupport/knowledge-center/lambda-function-assume-iam-role/
Topics
#cross-account IAM#Lambda execution role#role assumption#S3 access
Community Discussion
No community discussion yet for this question.