Cert Master

SCS-C02 Domain 3: Identity and Access Management

A regulated workload requires the organization to audit cross-account role assumptions. Which solution is BEST? audit cross-account role assumptions.

Multiple choice — select one answer

Answer choices

  1. a. CloudTrail AssumeRole events
  2. b. IAM Identity Center with external IdP
  3. c. IAM permission boundaries
  4. d. Lambda rotation or eliminate keys with roles

Architectural breakdown & explanation

ExternalId mitigates confused deputy.

Correct answer(s): a. CloudTrail AssumeRole events

Exam domain: Domain 3: Identity and Access Management (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Security – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications