New Year Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: simple70

Amazon Web Services AWS Certified DevOps Engineer - Professional DOP-C02 Question # 81 Topic 9 Discussion

Amazon Web Services AWS Certified DevOps Engineer - Professional DOP-C02 Question # 81 Topic 9 Discussion

DOP-C02 Exam Topic 9 Question 81 Discussion:
Question #: 81
Topic #: 9

A company has multiple member accounts that are part of an organization in AWS Organizations. The security team needs to review every Amazon EC2 security group and their inbound and outbound rules. The security team wants to programmatically retrieve this information from the member accounts using an AWS Lambda function in the management account of the organization.

Which combination of access changes will meet these requirements? (Choose three.)


A.

Create a trust relationship that allows users in the member accounts to assume the management account IAM role.


B.

Create a trust relationship that allows users in the management account to assume the IAM roles of the member accounts.


C.

Create an IAM role in each member account that has access to the AmazonEC2ReadOnlyAccess managed policy.


D.

Create an I AM role in each member account to allow the sts:AssumeRole action against the management account IAM role's ARN.


E.

Create an I AM role in the management account that allows the sts:AssumeRole action against the member account IAM role's ARN.


F.

Create an IAM role in the management account that has access to the AmazonEC2ReadOnlyAccess managed policy.


Get Premium DOP-C02 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.