ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Professional All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional exam
Go to Exam

Exam AWS Certified Solutions Architect - Professional topic 1 question 820 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional
Question #: 820
Topic #: 1
[All AWS Certified Solutions Architect - Professional Questions]

A company has several AWS accounts. A development team is building an automation framework for cloud governance and remediation processes. The automation framework uses AWS Lambda functions in a centralized account. A solutions architect must implement a least privilege permissions policy that allows the Lambda functions to run in each of the company's AWS accounts.
Which combination of steps will meet these requirements? (Choose two.)

  • A. In the centralized account, create an IAM role that has the Lambda service as a trusted entity. Add an inline policy to assume the roles of the other AWS accounts.
  • B. In the other AWS accounts, create an IAM role that has minimal permissions. Add the centralized account's Lambda IAM role as a trusted entity.
  • C. In the centralized account, create an IAM role that has roles of the other accounts as trusted entities. Provide minimal permissions.
  • D. In the other AWS accounts, create an IAM role that has permissions to assume the role of the centralized account. Add the Lambda service as a trusted entity.
  • E. In the other AWS accounts, create an IAM role that has minimal permissions. Add the Lambda service as a trusted entity.
Show Suggested Answer Hide Answer
Suggested Answer: AB 🗳️
by Firelord at Jan. 3, 2022, 7:12 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
tkanmani76
Highly Voted 2 years, 11 months ago
A&B is the right answer
upvoted 13 times
...
evargasbrz
Most Recent 1 year, 11 months ago
Selected Answer: AB
I'll go with A and B
upvoted 1 times
...
SureNot
2 years ago
Selected Answer: AB
The describtion is awful
upvoted 1 times
...
kenchou73
2 years, 3 months ago
Selected Answer: AB
https://medium.com/@it.melnichenko/invoke-a-lambda-across-multiple-aws-accounts-8c094b2e70be
upvoted 1 times
...
asfsdfsdf
2 years, 4 months ago
Selected Answer: AB
AB - create a role that assumes a role in other account - need to add a trust entity for it
upvoted 2 times
...
bobsmith2000
2 years, 6 months ago
Selected Answer: AB
Create a role in central account for Lambda and allow it to assume roles in other acc. In other accounts create a role with trusted policy for a role in central account and give it actual permissions.
upvoted 3 times
...
m0h3n
2 years, 9 months ago
C&D - centralized account - Create IAM role which can assumed by Lambda execution roles in other accounts and provide minimum permission. other account - Create roles which can be assumed by Lambda.
upvoted 2 times
m0h3n
2 years, 9 months ago
Changing to A&B, A - Lambda function located in centralized account - Lambda execution roles should assume a role in Managed accounts. Managed Account IAM role should have minimum permission and lambda execution role as trusted entity.
upvoted 2 times
hobokabobo
1 year, 8 months ago
No I think your first was correct - or I missread the question. If the lambda is to be called from the other accounts its CD. If the Lambda needs to access the other accounts it would be AB. Well documented and correct but I think thats not what the question asks.
upvoted 2 times
...
...
...
Bigbearcn
2 years, 10 months ago
Selected Answer: AB
AAABBB
upvoted 2 times
...
AMKazi
2 years, 11 months ago
Selected Answer: AD
https://aws.amazon.com/premiumsupport/knowledge-center/lambda-function-assume-iam-role/
upvoted 3 times
...
Firelord
2 years, 11 months ago
I think it's A & B
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago