A Company Is Using a Third-Party Vendor to Manage Its

Multiple Choice

A company is using a third-party vendor to manage its marketplace analytics. The vendor needs limited programmatic access to resources in the company's account. All the needed policies have been created to grant appropriate access. Which additional component will provide the vendor with the MOST secure access to the account?

A) Create an IAM user.
B) Implement a service control policy (SCP)
C) Use a cross-account role with an external ID.
D) Configure a single sign-on (SSO) identity provider.