Your company likes to operate multiple AWS accounts so that teams have their own environments. Services deployed across these accounts interact with one-another, and now there's a requirement to implement X-Ray traces across all your applications deployed on EC2 instances and AWS accounts. As such, you would like to have a unified account to view all the traces. What should you in your X-Ray daemon setup to make this work? (select two)
Correct answer - "Create a role in the target unified account and allow roles in each sub account to assume the role" & "Configure the X-Ray daemon to use an IAM instance role": This is how you setup X-Ray cross accounts. See:
Incorrect answers: "Generating a user & use keys" - This would work but wouldn't be a best-practice security wise.
"Enable Cross Account collection in the X-Ray console" - This setting is not needed and doesn't exist.
For more information visit