[Solved] Given this IAM role trust policy snippet:{ "Statement": [{ "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" }, "Action": "sts:AssumeRole" }] }Which AWS service can assume this role? | AWS

AWS - Identity and Access Management

Given this IAM role trust policy snippet:

{ "Statement": [{ "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" }, "Action": "sts:AssumeRole" }] }

Which AWS service can assume this role?

AAWS Lambda functions

BAmazon EC2 instances

CAmazon S3 buckets

DAWS IAM users

Step-by-Step Solution

Solution:

Step 1: Read the Principal service
The Principal is "lambda.amazonaws.com", which means AWS Lambda service is trusted.
Step 2: Match service to options
AWS Lambda functions matches AWS Lambda functions. EC2, S3, and IAM users are different entities and not trusted here.
Final Answer:
AWS Lambda functions -> Option A
Quick Check:
Principal service = lambda.amazonaws.com means Lambda [OK]

Quick Trick: Principal service name shows who can assume role [OK]

Common Mistakes:

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

Given this IAM role trust policy snippet: