AWS Certified Solutions Architect Associate SAA-C03 Practice Question

Setting up a role in the Test account and allowing the development team to assume this role from the Dev account is the recommended approach. This method uses temporary security credentials, providing secure and efficient access without sharing long-term credentials. It adheres to the principle of least privilege by granting only the necessary permissions for the task. Creating IAM users in the Test account and sharing credentials poses security challenges due to the burden associated with managing static credentials. Implementing a single sign-on solution might introduce unnecessary complexity for this specific scenario. Applying resource-based policies on individual resources is less scalable and harder to manage compared to using roles for cross-account access.