A company has multiple child accounts that are part of an organization in AWS Organizations. The security team needs to review every Amazon EC2 security group and their inbound and outbound rules. The security team wants to programmatically retrieve this information from the child accounts using an AWS Lambda function in the management account of the organization. Which combination of access changes will meet these requirements? (Choose three.)

Question

Marcin Piotrowski · Accepted Answer

Create a trust relationship that allows users in the management account to assume the IAM roles of the child accounts.

Marcin Piotrowski · Accepted Answer

Create an IAM role in each child account that has access to the AmazonEC2ReadOnlyAccess managed policy.

Marcin Piotrowski · Accepted Answer

Create an IAM role in the management account that allows the sts:AssumeRole action against the child account IAM role’s ARN.

Marcin Piotrowski · Answer

Create a trust relationship that allows users in the child accounts to assume the management account IAM role.

Marcin Piotrowski · Answer

Create an IAM role in each child account to allow the sts:AssumeRole action against the management account IAM role’s ARN.

Marcin Piotrowski · Answer

Create an IAM role in the management account that has access to the AmazonEC2ReadOnlyAccess managed policy.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 441 - DOP-C01 discussion

Suggested answer: B, C, E

0 comments