Amazon
SOA-C02 · Question #703
A company has AWS accounts in an organization in AWS Organizations. The company has built an AWS Lambda function in one account. The Lambda function needs to retrieve a list of Amazon EC2 instances th
Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #703. The question stem and answer options stay visible for context.
Submitted by lars.no· Mar 30, 2026Security and Compliance
Question
A company has AWS accounts in an organization in AWS Organizations. The company has built an AWS Lambda function in one account. The Lambda function needs to retrieve a list of Amazon EC2 instances that are running in another account. Which solution will provide this access MOST securely?
Options
- ACreate an IAM user in the account where the EC2 instances are running. Collect access keys from
- BConfigure the Lambda function's execution role to assume a cross-account IAM role in the account
- CFrom the management account in the organization, call the Organizations CreatePolicy API
- DCreate a new resource-based policy for the Lambda function. In the policy, set the Principal to "*"
Unlock SOA-C02 to see the answer
You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#cross-account IAM role#Lambda execution role#assume role#least privilege