A company operates multiple accounts in the AWS Cloud. Users in the developer account require access to particular resources in the production account.
What is the MOST secure method to grant this access?
A Create one IAM user in the production account Grant the appropriate permissions to the resources that are needed. Share the password only with the users that need access. B Create cross-account access with an IAM role in the developer account. Grant the appropriate permissions to this role. Allow users in the developer account to assume this role to access the production resources. C Create cross-account access with an IAM user account in the production account. Grant the appropriate permissions to this user account. Allow users in the developer account to use this user account to access the production resources. D Create cross-account access with an IAM role in the production account. Grant the appropriate permissions to this rote Allow users in the developer account to assume this role to access the production resources. Show Answer Answer Explanation An IAM role in the production account can be granted only the required permissions to production resources and configured to trust authorized principals from the developer account. Those principals assume the role to receive temporary, scoped credentials, avoiding shared passwords or long-term cross-account IAM-user credentials.
Learn more
Community Discussion