medium10 pts · first answer countscloud-securityiam-rolescross-account

Both sides of cross-account AssumeRole

Account A (111111111111) has a role whose trust policy trusts the root of account B (222222222222). A developer in account B still gets AccessDenied on sts:AssumeRole. What is most likely missing?

A.A bucket policy in account A naming the developer's ARNB.A KMS key policy that allows the developer to decryptC.An identity policy in account B allowing sts:AssumeRole on itD.An SCP in account A that explicitly allows sts:AssumeRole

Discussion 0

Join free to post in the discussion.

Both sides of cross-account AssumeRole

Discussion 0

Related questions