A security administrator in their own AWS account needs read access to inspect VPC configurations in several developer AWS accounts inside an AWS Organization. What is the most secure way to grant that access?

The correct answer uses a cross-account IAM role with least privilege permissions. Creating an IAM role in each developer account that grants read-only VPC permissions allows the security administrator to assume this role from their own account, providing secure, temporary access without sharing credentials. This aligns with AWS security best practices. The other options are incorrect because: Sharing IAM user credentials (even with read-only policies) is insecure and against best practices. Granting full administrative rights (EC2 and VPC) violates the principle of least privilege, giving unnecessary permissions.