AWS Certified SysOps Administrator Practice Exam

Which AWS service can be used to ensure that reports are copied across AWS accounts successfully?

1. AWS Lambda

2. AWS IAM Roles

3. AWS Transfer Family

4. AWS DataSync

The correct answer is: AWS IAM Roles

The use of AWS IAM Roles is a suitable choice for ensuring that reports are copied across AWS accounts successfully. IAM Roles allow for secure access management between different AWS accounts without the need to share security credentials. By creating a role in one account that grants the necessary permissions to the resources involved in the report copying process, you can allow another AWS account to assume this role. This mechanism enables cross-account access, ensuring that the reports can be copied seamlessly and securely. This process ensures that the right permissions are in place for secure data operations while maintaining the principle of least privilege. For example, the account that needs access to the reports can assume the role and act within the permissions allowed by that role, facilitating proper access controls and auditing capabilities. While AWS Lambda can automate processes, it does not inherently address the challenge of cross-account permissions by itself. AWS Transfer Family is designed for file transfers and does not specifically address the permissions aspect for copying reports across accounts. AWS DataSync is a service for automating the data transfer and synchronization between storage systems, but it also relies on appropriate IAM roles to function across accounts. Therefore, having a dedicated IAM Role for this scenario is the most effective and reliable solution.