Bird
0
0

You have a cross-account role that your AWS Lambda function needs to assume. What must you configure in the role's trust policy to allow this?

hard📝 Application Q9 of 15
AWS - Identity and Access Management
You have a cross-account role that your AWS Lambda function needs to assume. What must you configure in the role's trust policy to allow this?
AAdd the Lambda function's name as a trusted entity
BAdd the Lambda function's memory size as a trusted entity
CAdd the Lambda function's environment variables as trusted entities
DAdd the Lambda function's execution role ARN as a trusted entity
Step-by-Step Solution
Solution:

  1. Step 1: Understand trust policy requirements

    The trust policy must list the ARN of the entity allowed to assume the role, here the Lambda execution role ARN.

  2. Step 2: Eliminate incorrect trust entities

    Names, environment variables, or memory size are not valid trusted entities in IAM policies.

  3. Final Answer:

    Add the Lambda function's execution role ARN as a trusted entity -> Option D

  4. Quick Check:

    Trust policy needs execution role ARN [OK]
Quick Trick: Trust policy requires execution role ARN, not function name [OK]
Common Mistakes:
MISTAKES
  • Using function name instead of role ARN
  • Confusing environment variables with trust entities
  • Adding unrelated properties like memory size

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes
AWS CLI - Using profiles for multiple accounts - Quiz 11easy Cloud Computing Fundamentals - What is cloud computing - Quiz 11easy EC2 Fundamentals - Instance states (running, stopped, terminated) - Quiz 13medium EC2 Fundamentals - Instance types and families - Quiz 15hard Identity and Access Management - IAM users and groups - Quiz 12easy Identity and Access Management - Policy evaluation logic - Quiz 9hard S3 Fundamentals - Uploading and downloading objects - Quiz 3easy S3 Fundamentals - Creating S3 buckets - Quiz 8hard S3 Fundamentals - S3 encryption options - Quiz 12easy Security Groups and Network ACLs - Security groups vs NACLs decision - Quiz 1easy