A company wants to grant users in one AWS account access to resources in another AWS account.The users do not currently have permission to access the resources.
Which AWS service will meet this requirement?
IAM group
IAM role
IAM tag
IAM Access Analyzer
Explanations:
IAM groups are used to manage permissions for multiple users within the same AWS account but cannot grant cross-account access to resources.
IAM roles allow users or services in one AWS account to assume a role with specific permissions in another AWS account, enabling cross-account access.
IAM tags are used to add metadata to resources for identification or access control within policies, but they do not grant cross-account access.
IAM Access Analyzer helps monitor and identify resource access across accounts but does not itself grant permissions or facilitate cross-account access.
I opine that the answer is:
IAM role
As far as I can tell, the answer is:
IAM role