AWS Certified Solutions Architect Associate SAA-C03 Practice Question

To securely grant cross-account access to the message queue, the company should modify the queue's access policy to allow the IAM role attached to the EC2 instance in the other account to consume messages. This method uses a resource-based policy to specify who has access to the resource. Simply attaching an IAM role to the EC2 instance is necessary but not sufficient if the queue's access policy doesn't permit access. Enabling cross-account replication is a complex and costly procedure involving the leverage of additional layer (e.g. Lambda) to read messages from the source queue and send them to the destination queue. Sharing the queue using a resource access manager is not supported for AWS SQS service.