Cross-Account Access Management Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Security Controls

What you'll be asked

  1. Which of the following is the most secure and recommended method for granting cross-account access in a cloud environment?
  2. When configuring a cross-account IAM role, what is the purpose of the 'External ID' field?
  3. You are managing access between a Production account and a Logging account. The Logging account contains an S3 bucket that must be accessible by an application in the Production account. Which policy must be updated to allow this?
  4. If an Organization Service Control Policy (SCP) denies access to a specific service, but an IAM role has an explicit 'Allow' for that same service, what is the resulting outcome?
  5. A developer needs to access resources across three different accounts. To follow the principle of least privilege, how should the trust relationship for the cross-account roles be structured?

Answers and explanations come after you submit.