Cross-Account Access Quiz

What you'll be asked

1. What is the primary purpose of using IAM Roles for cross-account access instead of long-lived IAM user credentials?
2. When configuring cross-account access, which two components must be correctly linked to authorize the session?
3. If an IAM user in Account A needs to access an S3 bucket in Account B, what is the most secure way to grant this access?
4. You have configured cross-account role assumption, but the user receives an 'Access Denied' error. Which of the following is a common cause?
5. When using an External ID in a cross-account role trust policy, what specific security risk are you mitigating?

Answers and explanations come after you submit.