[Solved] Given this IAM role trust policy snippet:{"Statement": [{"Effect": "Allow", "Principal": {"Service": "ecs-tasks.amazonaws.com"}, "Action":... | AWS

AWS - Identity and Access Management

Given this IAM role trust policy snippet:

{"Statement": [{"Effect": "Allow", "Principal": {"Service": "ecs-tasks.amazonaws.com"}, "Action": "sts:AssumeRole"}]}

Which AWS entity is allowed to assume this role?

AAmazon EC2 instances

BAmazon ECS tasks

CAWS Lambda functions

DIAM users in the account

Step-by-Step Solution

Solution:

Step 1: Analyze the Principal service
The Principal is "ecs-tasks.amazonaws.com", which corresponds to Amazon ECS tasks.
Step 2: Match service to entity
Amazon EC2 instances use "ec2.amazonaws.com", Lambda uses "lambda.amazonaws.com", and IAM users are specified differently.
Final Answer:
Amazon ECS tasks -> Option B
Quick Check:
Principal service matches ECS tasks [OK]

Quick Trick: Service principal defines which AWS service assumes the role [OK]

Common Mistakes:

MISTAKES

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

Given this IAM role trust policy snippet: