AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 81

Question

A company uses AWS Organizations. The company wants to implement short-term credentials for third-party AWS accounts to use to access accounts within the company's organization. Access is for the AWS Management Console and third-party software-as-a-service (SaaS) applications. Trust must be enhanced to prevent two external accounts from using the same credentials. The solution must require the least possible operational effort. Which solution will meet these requirements?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Create a unique IAM role for each external account. Create a trust policy that includes a condition that uses the sts:ExternalId condition key. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified Security - Specialty SCS-C02 — Question 81