Create IAM users in the Master account with full Admin permissions. Create cross-account roles in the Dev and Test accounts that grant the Master account access to the resources in the account by inheriting permissions from the Master account.
Create IAM users and a cross-account role in the Master account that grants full Admin permissions to the Dev and Test accounts.
Create IAM users in the Master account. Create cross-account roles in the Dev and Test accounts that have full Admin permissions and grant the Master account access.
Link the accounts using Consolidated Billing. This will give IAM users in the Master account access to resources in the Dev and Test accounts
Explanations:
This option creates IAM users in the Master account but does not effectively allow the Master account to access resources in the Dev and Test accounts because it does not properly set up cross-account permissions for resource management. Cross-account roles should allow the Master account to assume roles in the other accounts, rather than inheriting permissions directly from the Master account.
This option suggests creating IAM users and a cross-account role in the Master account, which does not provide a proper mechanism for accessing and managing resources in the Dev and Test accounts. The cross-account role should be created in the Dev and Test accounts, not the Master account, to allow the Master account to assume those roles for access.
This option correctly sets up cross-account roles in the Dev and Test accounts that have full Admin permissions. It allows the IAM users in the Master account to assume these roles and gain access to manage resources, including stopping, deleting, or terminating them as needed. This meets the requirements for managing resources across multiple accounts.
Linking accounts through Consolidated Billing does not provide any permissions or access controls for IAM users in the Master account to manage resources in the Dev and Test accounts. It only allows for centralized billing and does not address the requirement for resource management capabilities.
To the best of my knowledge, the answer is:
Create IAM users in the Master account. Create cross-account roles in the Dev and Test accounts that have full Admin permissions and grant the Master account access.