nerdexam
Amazon

SOA-C02 · Question #147

A company has an AWS Lambda function in Account A. The Lambda function needs to read the objects in an Amazon S3 bucket in Account B. A SysOps administrator must create corresponding IAM roles in…

The correct answer is A. In Account A, create a Lambda execution role to assume the role in Account B. https://aws.amazon.com/premiumsupport/knowledge-center/lambda-function-assume-iam-role/

Submitted by kwame.gh· Mar 30, 2026Security and Compliance

Question

A company has an AWS Lambda function in Account A. The Lambda function needs to read the objects in an Amazon S3 bucket in Account B. A SysOps administrator must create corresponding IAM roles in both accounts. Which solution will meet these requirements?

Options

  • AIn Account A, create a Lambda execution role to assume the role in Account B.
  • BIn Account A, create a Lambda execution role that provides access to the S3 bucket.
  • CIn Account A, create a role that the function can assume.
  • DIn Account A, create a role that the function can assume to gain access to the S3 bucket.

How the community answered

(25 responses)
  • A
    72% (18)
  • B
    16% (4)
  • C
    8% (2)
  • D
    4% (1)

Explanation

https://aws.amazon.com/premiumsupport/knowledge-center/lambda-function-assume-iam-role/

Topics

#cross-account IAM#Lambda execution role#role assumption#S3 access

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice