The two policies that you attach to an IAM role are the access policy and the trust policy.The trust policy identifies who can assume the role and grants the permission in the AWS Lambda account principal by adding the _______ action.
aws:AssumeAdmin
lambda:InvokeAsync
sts:InvokeAsync
sts:AssumeRole
Explanations:
The actionaws:AssumeAdminis not a valid AWS action; it does not exist in the context of IAM role assumptions.
The actionlambda:InvokeAsyncis related to invoking Lambda functions, not to assuming IAM roles. It does not grant permissions for role assumption.
The actionsts:InvokeAsyncis also not a valid action in the context of AWS STS or IAM. It does not pertain to assuming roles.
The actionsts:AssumeRoleis the correct action that allows a principal to assume the IAM role, thereby granting the necessary permissions defined in the role’s policy.
If memory serves me right, the answer is:
sts:AssumeRole
If I’m correct, the answer is:
sts:AssumeRole