Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 438 discussion

https://aws.amazon.com/blogs/security/how-to-use-trust-policies-with-iam-roles/: "One AWS account accesses another AWS account – This use case is commonly referred to as a cross-account role pattern. This allows human or machine IAM principals from other AWS accounts to assume this role and act on resources in this account." "Trust relationship – This policy defines which principals can assume the role, and under which conditions. This is sometimes referred to as a resource-based policy for the IAM role. We’ll refer to this policy simply as the ‘trust policy’." Answer is C

Answer is C according to pofficial doc.aws on IAM tutorial: Delegate access across AWS accounts using IAM roles here: https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html

CCCCCCCCCCC

more secure

Always assume role

Why C, role is for services not for users?

C is much more secure

C is correct.

Its C Allways you see something related with security try to use IAM role

This is C

Answer is C.

Answer is C