A vendor needs access to your AWS account. They need to be able to read protected messages in a private S3 bucket. They have a separate AWS account. Which of the solutions below is the best way to do this?
A. Createa cross-account 1AM role with permission to access the bucket, and grantpermission to use the role to the vendor AWS account.
B. Createan 1AM User with API Access Keys. Give the vendor the AWS Access Key ID and AWSSecret Access Key for the user.
C. Createan S3 bucket policy that allows the vendor to read from the bucket from theirAWS account.
D. Allowthe vendor to ssh into your EC2 instance and grant them an 1AM role with fullaccess to the bucket.
Answer:A
A vendor needs access to your AWS account. They need to be able to read protected messages in a private S3 bucket. They have a separate AWS account. Which of the solutions below is the best way to do this?
A. Createa cross-account 1AM role with permission to access the bucket, and grantpermission to use the role to the vendor AWS account. B. Createan 1AM User with API Access Keys. Give the vendor the AWS Access Key ID and AWSSecret Access Key for the user. C. Createan S3 bucket policy that allows the vendor to read from the bucket from theirAWS account. D. Allowthe vendor to ssh into your EC2 instance and grant them an 1AM role with fullaccess to the bucket.
Explanation: Explanation