Reviewed by Aditya Kumar · Last reviewed 2026-03-24
Architectural flow: Account A (owner) bucket policy allows Account B role. Account B role has trust policy. Apps in B assume role → access A's bucket. Use external ID for extra security. Best practice: Least privilege; bucket policy; external ID; CloudTrail audit.
Architectural flow: Account A (owner) bucket policy allows Account B role. Account B role has trust policy. Apps in B assume role → access A's bucket. Use external ID for extra security. Best practice: Least privilege; bucket policy; external ID; CloudTrail audit.
Red Flag: Cross-account access without external ID. Pro-Move: 'Bucket policy allows B's role with external ID; we audit AssumeRole in CloudTrail—no keys shared.'
According to DataEngPrep.tech, this is one of the most frequently asked Cloud/Tools interview questions, reported at 1 company. DataEngPrep.tech maintains an editor-reviewed database of 1,863 data engineering interview questions across 7 categories.